Privacy

Privacy policy

Last updated June 28, 2026.

Doorman is an age-verification app for Shopify, built by Store Buddies. This page explains what Doorman stores, what it never stores, and how shop and shopper data is handled. It is a plain description of our data practices, not legal advice.

What we store

  • Your shop domain and app installation/session status.
  • The rules, appearance settings, and translations you configure in the Doorman admin.
  • Your subscription/billing plan status (Free or Pro).
  • Aggregate daily analytics counts: views, pass rate, fails, by country and device. These are totals, not records tied to an individual shopper.

What we never store

  • Shopper names, emails, or any other personal information.
  • Date of birth. It is evaluated entirely in the shopper’s browser and discarded immediately. It is never sent to our servers.
  • IP addresses or any other per-visitor identifier.
  • A record of who passed or failed a given age check. Doorman cannot tell you which shopper viewed your store.

How the storefront “remembers” a pass

After a shopper confirms their age, the storefront widget saves that fact in the shopper’s own browser, using localStorage, not a cookie and not a record on our servers, so they aren’t asked again on the same device and browser. Clearing site data or switching browsers resets it.

How we use this data

We use shop and configuration data to operate the app: rendering your age-gate rules on your storefront, showing your analytics dashboard, and processing billing through Shopify’s Billing API. We do not sell data, and we do not use it for advertising.

Third parties

Doorman runs on Shopify’s platform (OAuth, the Billing API, and theme app extensions) and stores configuration and aggregate analytics in a hosted PostgreSQL database we operate. We don’t share shop data with any other third party.

Data retention and deletion

When you uninstall Doorman, your shop’s rules, appearance, translations, and analytics are deleted from our systems. We also honor Shopify’s GDPR compliance webhooks for customer and shop data redaction requests, though since we never store shopper personal data or date of birth, there is nothing shopper-specific to redact.

Compliance aid, not legal advice

Doorman helps merchants take reasonable steps toward age verification. It is not a legal certification or guarantee of compliance with any law or regulation. Merchants are responsible for confirming the age and verification requirements that apply to their own products and markets.

Contact

Questions about this policy or your data? Email hello@storebuddies.com.