Uncheck for Shopify

Privacy policy of the Uncheck app

Last updated October 6, 2026 · Version française

Uncheck is not on the Shopify App Store yet. No store can install it today, so the app holds no store data. This page describes what the app processes once installed. The privacy policy of this website is a separate page, in French.

Uncheck is a Shopify app. It lets a store choose, market by market, whether its product page pre-selects one-time purchase, subscription, or nothing. It also lets you create subscription offers on your products, handles what follows from subscriptions, such as retrying failed payments and exporting your subscribers, and gives your customers a page in their account to manage their subscriptions.

This page says which data the app processes, why, who receives it, how long it is kept, and how to exercise your rights.

Who we are

Uncheck is published by 7 Hazart, a simplified joint-stock company (SASU) registered in Paris under number 940 775 042, whose registered office is at 6 rue Roubo, 75011 Paris, France. For any question about personal data, write to privacy@7hazart.com.

Your use of the app is governed by its terms of service, which you accept by installing it.

Your data and your customers' data

The app handles two kinds of data, and our role is not the same for each.

About your customers, meaning which subscription contracts they hold, which of their payments failed and what they ask for from their account: this data belongs to your store. You decide why it is processed; we process it on your behalf, only to provide the app and on your instructions. Under the GDPR, you are the controller and we are your processor (Article 28).
About your store, meaning its connection to the app, your settings, your Uncheck plan and your messages to us: for this data, 7 Hazart is the controller.

The terms on which we process your customers' data are set in the app's data processing agreement, which you accept by installing the app.

What the app processes, and why

Your store's connection. The address of your store on Shopify (its myshopify domain), the access token Shopify issues when you install the app, and the permissions you granted. When we need to write to you, for instance about the data processing agreement, we use your store's contact email address as Shopify provides it. Why: to connect the app to your store and act on it on your behalf. Legal basis: performance of our contract with you (GDPR Article 6(1)(b)).
Your settings. For each market, what the product page pre-selects, the texts, the font and the order of the purchase options; your other settings, such as a limit on the number of billing cycles; and the history of your changes (market, value before, value after, date), which lets you undo one. Why: to show on your product page what you chose. Legal basis: performance of the contract.
Your subscription offers. When you create or edit a subscription offer from a product or variant page of your Shopify admin, the app receives what you entered (the offer's name, its frequencies and their discounts) and the products and variants it applies to. It passes them to Shopify, which keeps the offer with your products; the app keeps none of it. Why: to create and update the offers you ask for. Legal basis: performance of the contract.
Your subscriptions. For each subscription contract handled by the app: its Shopify identifier, its status, its market, its start date, its number of billing cycles, its next billing date, its selling plan and the Shopify identifier of the order that opened it; for each failed payment, the retry log (contract, cycle, attempt number, result, date); and the Shopify identifier of the customer who holds each contract. Why: to retry failed payments, to export your subscriber list, to apply the changes you make to contracts, and to answer your customers' requests (see below), including, when a customer asks for it from their account, having Shopify email them a link to update their payment method. Here we act on your instructions, as your processor.
Your Uncheck plan. The identifier and status of your Uncheck subscription, as Shopify reports them. Payment goes through Shopify: we never see your payment details. Why: to know which plan applies and to stop billing when you uninstall. Legal basis: performance of the contract.
When to ask for a review. The dates on which you first opened the app, first got a result from it (a successful payment retry, or a downloaded record of your settings), and were asked for a review. Why: to ask once, and only after the app has been useful to you. Legal basis: our legitimate interest in collecting reviews (Article 6(1)(f)).
When you write to us. Your email address and your message. Why: to answer you. Legal basis: performance of the contract, or our legitimate interest in answering you if you are not a customer.

The app does not read or keep your customers' names, email addresses, phone numbers or payment details, and reads nothing of their address but its country, which gives the contract its market.

The subscriber export contains the contract, its status, its market, its start date and its number of billing cycles, and nothing else.

On your product page

The block the app adds to your product page displays the purchase options you configured. It loads no script from us, sets no cookie, and sends us nothing about your visitors.

In your customers' account

The app adds a Subscriptions page to your customers' Shopify account, and a link to that page on their order status page.

The page shows each customer their own subscriptions with your store, including those sold through another app: products, quantities, prices, frequency and next billing date. Their browser reads this from Shopify; it does not pass through our servers.
When a customer cancels a subscription there, whichever app sold it, their browser sends the cancellation to Shopify, without going through our servers. For a subscription the app handles, it sees the new status the next time it reads your contracts from Shopify.
When a customer asks for the link to update their payment method, the request comes to our servers with the Shopify identifiers of the customer and of the contract, and the IP address of their device. The app checks with Shopify that the contract is that customer's, reads the identifier of its payment method (never the card details), and asks Shopify to email the customer a secure link, at the address Shopify has for them. It does this only for a subscription the app handles; for one sold through another app, it refuses the request and sends nothing. The app stores nothing from this request.
To offer that link only on the subscriptions the app handles, the page asks our servers which ones these are each time a customer opens it. The request comes with a session token from Shopify that identifies the customer and your store, and with the IP address of their device. The app reads from Shopify that customer's subscriptions with your store and the app that handles each, keeps only those it handles, and sends their identifiers back to the page, nothing else. The app stores nothing from this request.

Who receives the data

Only the following, each for the part of the service it performs:

Shopify, the platform the app runs on. The app reads and writes your store's data through the Shopify API, and Shopify bills your Uncheck plan. Shopify processes this data under your own agreement with Shopify.
Railway Corporation (548 Market St, San Francisco, California, United States) hosts the app and its database, on servers in Amsterdam, Netherlands.

We sell no data, share none for advertising, and pass none to anyone else unless the law requires it. A new provider is added to this list before it receives any data.

Railway is based in the United States. The data is stored on its servers in Amsterdam; any access from outside the European Union is covered by the data processing agreement we have with Railway, which relies on the European Commission's standard contractual clauses or on the EU-U.S. Data Privacy Framework.

How long the data is kept

Your store's connection, your settings, your plan, your subscriptions and the retry log are kept while the app is installed. When you uninstall it, Shopify sends us a request to erase your store's data, and we erase all of it.
When one of your customers asks your store to erase their data, Shopify forwards the request to the app and we erase that customer's entries. When a customer asks what your store holds about them, we give you what the app holds about that customer, so that you can answer.
Your messages are kept for as long as the exchange and its follow-up require.

Your rights

For the data we hold as controller, you can ask for access, rectification, erasure, restriction or portability, and object to any processing based on our legitimate interest. Write to privacy@7hazart.com; we answer within one month (GDPR Article 12(3)). You can also lodge a complaint with the CNIL, the French data protection authority, at cnil.fr.

Your customers exercise their rights with your store, which is their controller. Shopify forwards their requests to the app, and we carry them out as described above.

Security

The app is served only over HTTPS, so its data is encrypted in transit. Railway states that it encrypts stored data at rest. At 7 Hazart, the database is accessed only to run and repair the app.

Changes to this policy

When what the app processes changes, this page changes first, and the date at the top changes with it.