Privacy Policy

1. Introduction

This privacy policy covers all plugins, extensions, and apps ("Products") developed and operated by ByStenild, owned by Jonas Stenild, a sole proprietorship registered in Denmark (VAT: DK38194143).

This policy applies to merchants who install our Products from any supported marketplace, as well as to visitors of stores where our Products are active. We are committed to protecting your privacy and handling your data transparently, in compliance with the EU General Data Protection Regulation (GDPR) and applicable marketplace requirements.

2. Covered Products

This policy applies to all current and future ByStenild products, including but not limited to:

If we release additional Products, they will be governed by this same policy unless a separate policy is provided.

3. What Data We Collect

3.1 Store and Product Data

When installed, our Products access the following data through the respective platform's APIs, solely to deliver their core functionality:

• Product URLs, SEO handles, and slugs (to identify deleted or deactivated products)
• Product-to-category assignments (to determine the best redirect destination)
• Store domain, locale, and language settings (to generate correct redirect URLs)

3.2 Redirect and Analytics Data

Our Products generate and store operational data required for their functionality:

• Redirect mappings (source URL to destination category URL)
• Aggregate redirect counts (number of times each redirect has been triggered)
• Summary analytics (total redirects today, past 7 days, past 30 days, lifetime)

3.3 What We Do Not Collect

Our Products do not collect, store, or process:

• Personal data of store visitors (no names, emails, IP addresses, or device identifiers)
• Customer order or payment information
• Cookies or tracking pixels on storefronts
• Browsing behaviour or analytics beyond aggregate redirect counts
• Any data unrelated to product URL redirects

4. How We Use Your Data

All data accessed and generated by our Products is used exclusively to:

• Detect when a visitor lands on a deleted or deactivated product URL
• Resolve the most relevant category page as a redirect destination
• Issue HTTP 301 Moved Permanently redirects to preserve SEO value
• Display aggregate redirect analytics in the store's admin panel
• Allow merchants to review and manage active redirect rules

We do not use your data for advertising, profiling, marketing, or any purpose other than delivering the stated functionality of our Products.

5. Data Sharing and Third Parties

We do not sell, rent, or share your data with any third parties. Our Products operate entirely within the respective platform's infrastructure (Shopify, Shopware, WordPress/WooCommerce, or Adobe Commerce) and communicate only with the platform's own APIs. No data is transmitted to external servers, analytics services, or third-party platforms.

The only exception is if we are legally required to disclose information by applicable law, regulation, or legal process.

6. Data Storage and Security

All data is stored securely within the respective platform's infrastructure, using each platform's native storage mechanisms (metafields, database tables, or equivalent). We rely on each platform's enterprise-grade security measures, including encryption in transit (TLS/SSL) and at rest where provided.

We do not maintain separate external databases or servers that store your merchant or store data outside of the platform where the Product is installed.

7. Data Retention

Redirect mappings and analytics data are retained for as long as the Product is installed on your store. When you uninstall a Product, all associated data is deleted in accordance with the respective platform's app data removal requirements - typically within 48 hours.

You can also manually delete individual redirect rules at any time through the Product's admin interface.

8. Your Rights

Under GDPR and applicable data protection laws, you have the right to:

• Access - Request a copy of any data our Products store related to your store
• Rectification - Request correction of any inaccurate data
• Erasure - Request deletion of your data (or simply uninstall the Product)
• Restriction - Request that we limit how your data is processed
• Portability - Request your data in a structured, machine-readable format
• Objection - Object to data processing on grounds relating to your particular situation

To exercise any of these rights, contact us at the address listed below. We will respond within 30 days.

9. Platform APIs and Access Scopes

Our Products request only the minimum API access scopes or permissions necessary for their functionality on each platform. This typically includes read access to products and their URL handles, and read access to categories or navigation structures. No write access to customer, order, or payment data is requested.

For details on how each platform handles your data, refer to their respective privacy policies:

• Shopify Privacy Policy
• Shopware Privacy Policy
• WordPress / WooCommerce Privacy Policy
• Adobe Commerce Privacy Policy

10. Store Visitor Privacy

For visitors browsing a store where one of our Products is active: the Product does not track you, does not set cookies, and does not collect any personal information. When you visit a URL for a product that no longer exists, the Product simply redirects your browser to a relevant category page. A short-lived session flag may be set by the platform to display a notification message on arrival. No personal data is involved in this process.

11. Children's Privacy

Our Products are business tools designed for e-commerce merchants. They are not directed at children under the age of 16, and we do not knowingly collect personal data from children.

12. Changes to This Policy

We may update this privacy policy from time to time to reflect changes in our Products' functionality, the addition of new Products, or changes in applicable regulations. Any changes will be posted on this page with an updated effective date. If a change is material, we will notify affected merchants through the respective platform's admin panel or via email.

13. Contact

If you have questions about this privacy policy, want to exercise your data rights, or need to report a concern, contact us: