Skip to content

Privacy Policy

How personal information is collected, used, and shared by the Loman Group Shopify apps.

This Privacy Policy describes how Loman Group LLC collects, uses, and shares personal information when you install one of our apps on your Shopify store, or when you visit a store that has one installed.

It covers all of our Shopify apps:

  • Coming Soon
  • Loman Maintenance Mode
  • Loman Age Verification

They are built on shared code and handle merchant information identically. What each collects from storefront visitors differs, and is described app by app below.

Photo Tidy(er), our iPhone app, is not covered here; it has its own privacy policy.

Two different groups of people are described below, and it is worth knowing which one you are:

  • Merchants — you installed one of our apps on your Shopify store.
  • Storefront visitors — you visited a store that has one of our apps active, and saw the page or the age gate the app displays.

INFORMATION WE COLLECT FROM MERCHANTS

When you install an app, Shopify provides us with information about your store, which we store for as long as the app is installed:

  • your store name, myshopify.com domain, and Shopify store ID
  • the store owner’s name and email address
  • your store’s country, timezone, and Shopify plan name
  • an access token allowing the app to work with your store, and your subscription status

We use this to run the app, to bill you through Shopify, to send you service email about your account, and to answer you when you contact support. Country and timezone let us reply at a reasonable hour.

We do not receive or store your payment details. Shopify processes all charges; we are told only which plan you are on and whether it is active.

INFORMATION WE COLLECT FROM STOREFRONT VISITORS

Every app keeps one thing about a storefront: a count of how many times its page or gate was served on a given day, per store. That number holds no address, no identifier and nothing about any individual visit. It exists so we can tell a working install from an abandoned one.

Coming Soon also records each view of its page, so the merchant can see how their page is performing. Each view stores:

  • a hashed version of your IP address — we do not store the address itself
  • the page path, the referring URL, and your browser’s user agent string
  • the date and time

If the merchant is running an A/B test, a random identifier is generated so that you keep seeing the same version of the page on repeat visits. It is not linked to your name, your email, or any identifier from another site, and it is not used for advertising.

If you enter your email address into a form on a Coming Soon page — to be told when the store opens — we store that email address, and your name if the form asked for it, and pass it to the merchant’s Shopify customer list. That is the merchant’s data, and how they use it is governed by their privacy policy, not this one.

Loman Maintenance Mode records nothing about a visit beyond the daily count, and asks you for nothing. It cannot write to a store’s customer list at all: it does not hold the Shopify permission that would allow it.

Loman Age Verification shows a gate over the storefront and asks you a question: either to confirm that you are old enough, or for your date of birth, and on some stores where your order will ship, because the minimum age can differ by country, state or province. Your answer is sent to us once, to decide whether the gate opens. We do not store it, we do not write it to our logs, and we do not link it to you or to anything else; a date of birth is discarded the moment the outcome is decided. Two things come out of a successful answer, and neither identifies you:

  • a pass kept in your browser so you are not asked again on every page — see the next section
  • a marker on your shopping cart, which Shopify carries through to the order. The merchant sees it on the order as the words Age verified, the minimum age the gate applied, and a reference number; two further values, hidden from you, are what Shopify’s checkout compares. On stores that use the app’s checkout enforcement, Shopify will not complete an order whose cart has no valid marker, and that check runs on Shopify’s own servers and sees nothing but the cart.

The marker says that the check was answered, not how old you are. Nothing in the app knows anyone’s age; the answer is what you told it. Once the marker is on an order it is part of the merchant’s order records in Shopify, covered by their privacy policy.

We do not collect anything else from visitors. We do not build profiles across stores, and the information above is only ever visible to the merchant whose store you visited.

COOKIES AND LOCAL STORAGE

The pages our apps display to storefront visitors do not set cookies. They are served through Shopify’s app proxy, which strips cookies in both directions.

Where a page needs to remember something about your visit, it uses your browser’s localStorage instead: Coming Soon’s A/B test identifier described above, and Loman Age Verification’s pass, which is nothing more than the time it lapses — thirty days after you answered — and a number that lets the store’s gate tell whether the merchant has since reset every pass. Loman Maintenance Mode stores nothing. You can clear any of it at any time through your browser’s “clear site data” controls.

The app’s admin interface, which only merchants see inside the Shopify admin, does use a session cookie to keep you signed in. That is the only cookie any of our apps sets.

GOOGLE ANALYTICS

Our apps do not use Google Analytics.

Coming Soon has an optional setting that lets a merchant put their own Google Analytics measurement ID into their page; Loman Maintenance Mode and Loman Age Verification have no such setting. If a merchant fills it in, Google’s script is loaded on that page and the data goes to that merchant’s own Google Analytics property — not to us. Whether it is enabled and what is done with the data is the merchant’s decision, covered by their privacy policy and by Google’s. You can opt out of Google Analytics across all sites here.

HOW WE SHARE INFORMATION

We do not sell personal information.

We share it with service providers who help us operate the apps, and only as far as that requires. These include:

  • Shopify, which hosts the store, processes billing, and is the source of the merchant information above — see Shopify’s privacy policy
  • MailerSend, which delivers our service email to merchants
  • DigitalOcean Spaces, which stores encrypted database backups
  • Grafana Cloud, which stores application logs
  • Hetzner, which provides the servers the apps run on

We may also disclose personal information to comply with applicable law, to respond to a subpoena, search warrant, or other lawful request, or to protect our rights.

DO NOT TRACK

We do not change what we collect when we receive a Do Not Track signal. What we collect from storefront visitors is described above and is the same for everyone.

YOUR RIGHTS

Wherever you live, you may ask us what personal information we hold about you, and ask us to correct or delete it. Email [email protected] and we will respond.

If you are in the European Economic Area or the United Kingdom, you have the right to access, correct, delete, and port your personal information, and to object to or restrict how we use it. We process merchant information to perform our contract with you, and storefront analytics on the basis of our and the merchant’s legitimate interest in understanding how a page performs. Loman Age Verification processes the answer you give its gate on the basis of the merchant’s legitimate interest in restricting who may buy age-restricted goods, for the moment it takes to decide the outcome, and retains nothing. You also have the right to complain to your local data protection authority.

If you are a California resident, you may request the specific pieces and categories of personal information we have collected, and ask us to delete it. We do not sell personal information and have not done so.

Your information is stored and processed in the United States, and may be accessed from other countries.

If you are a storefront visitor, the merchant whose store you visited is the right first contact, because most of what concerns you is theirs. Requests they forward to us through Shopify are handled automatically within the time Shopify requires.

DATA RETENTION

We keep merchant information for as long as the app is installed. When you uninstall, Shopify notifies us and we mark the store for deletion; we act on Shopify’s mandatory data-deletion requests within the period Shopify requires. Storefront analytics are retained while the merchant’s store has the app installed, so they can see how their page has performed over time. Loman Age Verification retains nothing about a visitor: the pass lives in your browser until it lapses or you clear site data, and a marker on an order is part of the merchant’s order records in Shopify, kept for as long as they keep the order.

You may ask us to delete your information sooner using the contact details below.

CHANGES

We may update this policy from time to time to reflect changes to our practices, to cover a new app, or for other operational, legal, or regulatory reasons. Material changes will be reflected in the date below.

CONTACT US

For more information about our privacy practices, if you have questions, or if you would like to make a complaint, contact us by email at [email protected] or by mail:

Loman Group LLC 3366 Pierce St, Apt 204 San Francisco, CA 94123 United States

Last updated: 12 September 2026.