Last Updated: 14/01/2026
1. Introduction
This Privacy Policy explains how Social Fortune (“we”, “us”, or “our”) collects, uses, and protects information when you interact with our Shopify application: Plink Suite.
2. Information We Collect
2.1 From Store Customers
When you interact with the Social Fortune popup on a merchant’s store, we collect:
Information You Provide:
- Email address – voluntarily submitted to play the game
Automatically Collected Information:
- Session identifier – a randomly generated anonymous string stored in your browser’s session storage
- Page URL – the page where you interacted with the popup
- Gameplay data – which prize you won and the coupon code generated
- Timestamps – when you played the game
2.2 Browser Storage
We use browser storage technologies (NOT cookies) to enhance your experience:
| Data | Storage Type | Purpose | Duration |
|---|---|---|---|
| Session ID | Session Storage | Track impressions | Until browser tab closes |
| Played status | Local Storage | Prevent duplicate plays | Persistent |
| Coupon code | Local Storage | Auto-fill at checkout | Persistent |
| Coupon applied status | Local Storage | Track if code was used | Persistent |
Note: These are stored locally in your browser and are shop-specific. We do not use third-party tracking cookies.
2.3 From Merchants
When merchants install our app, we collect:
- Shopify store domain
- OAuth access token (for API access)
- App configuration settings
- Billing and subscription information
- Third-party integration credentials (Klaviyo, Mailchimp, Zapier API keys)
3. How We Use Information
Customer Data:
- Deliver discount codes you’ve won
- Prevent duplicate game plays
- Record gameplay for merchant analytics
- Provide impression statistics to merchants
Merchant Data:
- Operate and provide app functionality
- Process billing through Shopify
- Create discount codes in the merchant’s Shopify store
- Send data to merchant-configured integrations
4. Information Sharing
4.1 With the Merchant’s Shopify Store
When you submit your email and win a prize:
- Your email is added to the merchant’s Shopify customer list with marketing consent
- A unique discount code is created in their store
4.2 With Third-Party Integrations (Merchant-Configured)
Only if the merchant has configured these integrations, your email and coupon code may be shared with:
- Klaviyo – for email marketing
- Mailchimp – for email marketing
- Zapier – for custom automations (includes email, coupon code, discount value, prize name, shop domain, timestamp)
We do not sell your personal information.
5. Data Retention
- Customer play data – retained as long as the merchant’s account is active
- Merchant data – deleted within 48 hours of uninstalling the app (per Shopify requirements)
- Browser storage – persists until you clear your browser data
6. Your Rights (GDPR/CCPA)
You have the right to:
- Access your data
- Delete your data
- Correct inaccurate data
- Object to processing
To exercise these rights, contact the merchant directly or email us at [YOUR_EMAIL].
We handle Shopify’s mandatory GDPR webhooks (customers/data_request, customers/redact, shop/redact) to process data deletion requests.
7. Data Security
- All data transmitted using TLS/SSL encryption
- OAuth tokens stored securely in our database
- Minimal data access permissions requested from Shopify
8. Children’s Privacy
We do not knowingly collect data from children under 16.
9. Changes to This Policy
We may update this policy. Continued use after changes constitutes acceptance.
10. Contact Us
Email: hello@socialfortune.net