AgeProof — Privacy Policy

Last updated: October 3, 2026

AgeProof ("the app", "we") is operated by Wigley Studios LLC. It blocks underage checkout with a storefront age gate and a server-side checkout block, and keeps a tamper-evident compliance log. This policy explains what we access and store.

What we access

• Checkout validations (read & write) — we register and manage a cart/checkout validation rule on your store so the age block can run on Shopify's servers (scopes: read_validations, write_validations).
• App-owned shop metafield (write) — we store your age-gate settings in an app-owned metafield our checkout validation reads at runtime; app-owned metafields need no access scope.
• Products (optional) — if you gate individual products on the Compliance plan, AgeProof asks for permission to edit products (write_products) and adds an AgeProof marker (a metafield) to each product you gate so the checkout block can check it.

We do not read your orders or customers. The storefront gate and the checkout block run via a theme app embed and a Shopify Function; the app does not request theme permissions or edit your theme files.

What the age gate sends us

The age gate does not send us a name, email or date of birth. When the gate asks for a date of birth, the visitor's browser works out their age and sends us only that age in whole years, with the outcome. Our server uses the visitor's IP address to look up a country in a database on our own server; the IP address is not stored. When a visitor passes, the gate saves a signed pass token in a cookie (ageproof_verified) for the remember period you choose (the token is valid for at most 90 days) and adds it to the cart as the age_verified attribute so the checkout block can verify it.

What we store

• Your shop domain and a Shopify session/access token (to operate the app).
• Your settings (minimum age, enforcement, plan, gated products, regional rules).
• A compliance log of age-gate decisions: the time, the outcome (verified or blocked), the method, the minimum age applied, the age the visitor's browser calculated (when a date of birth was asked for) and a country looked up from the visitor's IP address. The log does not contain a name, email, IP address, date of birth or any identifier for the visitor.
• A copy of your subscription status from Shopify: plan, status, price, currency, billing interval, Shopify's subscription ID, start and renewal dates, and whether you have used the free trial.
• When you first and last opened the app, and how many times you have opened it.

What we send to third parties

AgeProof uses no AI or LLM providers. Apart from Shopify, the only other services involved are our hosting and email provider, Hostinger.

Emails we send you

We use the email address on your Shopify account (or your store's contact email if there is none) to email you about the app: a welcome email when you first open it, another when a paid plan starts, and a monthly compliance statement, and alerts if your gate seems to have stopped running, if it is refusing every visitor, or if checkouts are being blocked without the gate. These emails are sent from noreply@wigleystudios.com through our email provider, Hostinger. We keep a record of the address each welcome email was sent to.

Data retention & deletion

• The app and its data are stored on a server we rent from Hostinger.
• When you uninstall, we delete your Shopify access tokens straight away and mark your subscription record as cancelled. The rest of your data stays until Shopify sends us its shop deletion request (shop/redact), normally about 48 hours after you uninstall, and we then delete the data stored for your shop.
• When you uninstall we also save a short summary of how the app was used, such as how many age checks your gate recorded, when you first and last used it, and your plan. When the deletion request arrives we remove your shop's domain from this summary and keep the rest to understand why stores leave.
• We also honor the customers/data_request and customers/redact webhooks; because we store no customer personal data, these are acknowledged with nothing to return or erase.
• You can ask us to delete your data at any time: support@wigleystudios.com.

On the Compliance plan you can choose a retention window of 90 days, 1 year or 2 years; entries older than the window are deleted the next time the log is opened or exported. On the free plan the log page shows the last 7 days, but older entries are kept and are deleted with the rest of your data after you uninstall.

Your rights

You can uninstall the app at any time to stop data collection and start deletion. For any data request, contact us.

Changes

We may update this policy; material changes will be reflected by the “Last updated” date above.

Contact

Wigley Studios LLC, 8735 Dunwoody Place #12345, Atlanta, GA 30350, USA — support@wigleystudios.com