Cartetto Privacy Policy
Last updated: 14 October 2026 (before the first release)
Cartetto ("the App") is a Shopify app operated by Vitalcore Research Inc., doing business as Nolarine ("we", "us"), 30 N Gould St, Ste R, Sheridan, WY 82801, USA. It adds a cart drawer to a Shopify store's online store, with goals toward free shipping, free gifts and order discounts, upsells, and results that show the merchant which offers sell. This policy explains what information the App collects, why, and what rights you have.
Who this policy covers
- Merchants: the Shopify stores that install the App, and the store staff who use it.
- Shoppers: visitors and customers of those stores, whose carts the App's drawer shows.
The App is built to hold no personal information about shoppers. It does not read or store any shopper's name, email address, phone number, postal address, IP address or payment details, it sets no cookies, and it never contacts shoppers. Where the App handles anything that relates to a shopper (the order numbers described below), the merchant is the data controller and we act as their processor. Shoppers with questions should contact the store first; we will help the store respond. Merchants who need a data processing agreement can ask for one at support@nolarine.com.
Information we collect
From merchants, when the App is installed:
- The store's Shopify domain, name, contact email, currency, markets and published languages.
- The name and email of the staff member signed in to the App, which Shopify provides so the App knows who is using it.
- A Shopify access token so the App can do its job. It is stored in a database on our server that is not reachable from the internet.
- The plan, the trial dates and the setup steps completed.
- The settings the merchant chooses: the drawer's design and texts, goals, gifts, upsells and their rules, schedules and tests.
About orders, for the Results page: when an order is placed, the App reads it from Shopify and keeps only numbers: the order's ID, date, currency and total, the revenue from upsells added in the drawer, whether a gift was given, the comparison group the cart was in, and which of the App's offers it contained. It does not keep the customer's name, email, address or the order's other details.
From the storefront, for the Results page: the App's web pixel, which runs inside Shopify's own sandbox and only after the shopper has allowed it under the store's cookie and privacy settings, sends us the name of an event (the drawer was opened, an offer was shown or added, a cart was counted), the comparison group, the offer, an amount, and a one-way scrambled code made from the cart, so each cart is counted once. We store daily counts per offer and group (not the amounts), and a further scrambled form of the codes for 7 days. Nothing in them identifies a person. To limit floods, the address the request came from is held in memory for one minute and never stored.
In the shopper's cart and the merchant's orders, not on our server: the drawer adds one hidden cart attribute named "_cartetto" with the comparison group, the offer set, the offers added through the drawer (offer and product variant numbers) and any free gift the shopper declined. On a free gift's own line it adds one hidden line property, "_cartetto_gift", so Shopify's discount knows which line is the gift. Shopify does not show hidden attributes or properties (their names start with an underscore) at checkout, and copies them to the order, where the merchant can see them. Nothing is added to the shopper's other lines.
We do not collect or store card numbers or other payment credentials. Shoppers pay in Shopify's checkout.
The App adds no cookies, local storage or advertising trackers to the merchant's storefront. Which comparison group a cart is in is worked out from the cart itself each time, not stored in the shopper's browser.
How we use it
- To show the drawer, goals, gifts and upsells the merchant set up, and to create the Shopify discounts that make the rewards.
- To show merchants how each offer performs and how carts with the drawer compare with carts without it.
- To provide support, keep the App secure, and fix problems.
We do not sell personal information, and we do not use it for advertising or profiling. The App sends no emails, to merchants' customers or anyone else.
Legal basis. For merchant information, we rely on our contract with the merchant (providing the App they installed) and our legitimate interest in keeping it secure and supporting it. For the order numbers and counts, we process them on the merchant's instructions; the merchant decides the legal basis. The web pixel follows the store's consent settings, so shoppers who do not allow it are not counted.
Who we share it with
Only service providers that help us run the App, under contracts that limit their use of it:
| Provider | Purpose | Location |
|---|---|---|
| Shopify | The platform the App runs on; the storefront, cart, checkout, discounts and web pixels | Canada / worldwide |
| Hetzner Online GmbH | Application hosting and database (encrypted HTTPS connections; daily backups) | Germany (Falkenstein), European Union |
| Cloudflare, Inc. | Domain name service, and forwarding of email sent to support@nolarine.com | United States / worldwide |
| Google LLC | The mailbox where support email is read and answered | United States / worldwide |
We may also disclose information if required by law.
How long we keep it
- While the App is installed, we keep the merchant's settings. Order numbers and daily counts are deleted after 24 months; the scrambled cart codes after 7 days.
- When a merchant uninstalls the App, Shopify notifies us 48 hours later and we delete that store's data within 30 days.
- When Shopify forwards a request to delete a customer's data, we delete the order numbers we hold for that customer's orders within 30 days.
- When a customer asks a store for their data, we keep a note of the request (Shopify's customer ID and the order numbers in it) so the merchant can answer it, until it is answered or the store's data is deleted. The App holds nothing else about that customer.
- After a store uninstalls, we keep only its Shopify domain and the date its free trial started, so that each store gets one free trial. This contains no personal information.
- Database backups are kept for 14 days, so deleted information leaves them within 14 days of being deleted.
- Server logs hold store domains and order numbers, never names or emails; they are rotated automatically and kept only for a short time.
- Support emails are kept for up to 24 months after the conversation ends, then deleted.
The hidden "_cartetto" attribute on past orders is part of the merchant's Shopify order data, kept or deleted by the merchant like the rest of the order.
Your rights
Depending on where you live (for example under the GDPR, UK GDPR or CCPA/CPRA), you may have the right to access, correct, delete or export your personal information, and to object to or restrict its processing. Shoppers should contact the store first; merchants can contact us directly. We respond within 30 days. You can also complain to your local data protection authority.
Security
Data is sent over HTTPS and stored with our hosting provider, on an encrypted disk, with access limited to what the App needs. Only Nolarine's operator can reach the server and its database, by key login. To help a store, we look at its plan, its settings and the status of the App's work for it, and every operator action is logged. No system is perfectly secure, but we take reasonable steps to protect your information. If a security incident exposes personal information, we tell affected merchants within 72 hours of finding out. Report a security problem to support@nolarine.com.
International transfers
We are based in the United States and our providers may process data in other countries. Where the law requires, we rely on appropriate safeguards such as standard contractual clauses.
Children
The App is for businesses and is not directed at children under 16.
Changes
We will post any changes on this page and update the date above. Significant changes will be announced to merchants in the App.
Contact
Vitalcore Research Inc. (Nolarine) 30 N Gould St, Ste R, Sheridan, WY 82801, USA Email: support@nolarine.com