COOKIE POLICY

Peci: Revenue Radar — Cookie Policy

This Cookie Policy explains what cookies and similar technologies the Peci: Revenue Radar Shopify application uses, why, and how you can control them.

---

1. What is a cookie

A cookie is a small text file placed on your device by a website or application. Cookies are widely used to make applications work, or work more efficiently, and to provide information to the operator. This policy also covers similar technologies that store information in your browser, such as localStorage.

---

2. Who this applies to

Merchants (Shopify Admin users): when you use the Peci: Revenue Radar admin interface embedded inside your Shopify Admin, certain cookies are set by Shopify to maintain your authenticated session; the App sets none of its own (Section 3).

Visitors of Merchant stores: when you visit a store where Peci: Revenue Radar is installed, the App's Shopify Web Pixel stores nothing in your browser. See Section 4.

---

3. Cookies used in the Shopify Admin (merchants)

The Peci: Revenue Radar admin interface is an embedded Shopify app that operates inside an iframe within the Shopify Admin.

Name / category	Type	Set by	Purpose	Duration
Shopify Admin session cookies	Strictly necessary	Shopify Inc.	Authenticate the Shopify Admin session; required for the embedded app frame to function.	Session / as set by Shopify
App session (no cookie)	Strictly necessary	Shopify App Bridge	Maintains the authenticated connection between the embedded app and our servers through short-lived App Bridge session tokens and server-side session storage. This is listed for completeness: the App sets no cookie of its own.	Until token expiry or uninstall

No analytics, advertising, or cross-site tracking cookies are set in the admin interface by us.

---

4. The storefront Web Pixel (visitors)

The App's storefront component is a Shopify Web Pixel. Shopify runs it in a strict sandbox (a web worker) without access to the page, and only where the store's customer privacy settings permit analytics for the visitor. It sets no cookies and uses neither localStorage nor sessionStorage.

Shopify's own visitor identifier. Each event the pixel receives from Shopify carries Shopify's pseudonymous visitor identifier (clientId), which Shopify describes as the client-side ID of the customer, provided by Shopify. Shopify creates and manages it; the App does not create it and does not store anything on the device. The pixel sends the identifier with the event to our servers, where it is processed as described in the Privacy Policy, Section 3b.

Information read from the browser. With each event, the pixel also reads three values from the browser context that Shopify provides to it: the browser's user agent, the screen size and whether cookies are enabled. They are sent with the event and used once, at intake, to assess whether the visit is automated; they are not stored (Privacy Policy, Section 3b). Reading them, like reading Shopify's visitor identifier, is access to information on the visitor's device, which is why the pixel runs only where the store's customer privacy settings permit analytics (see Consent below).

Data kept on our servers. The storefront events, the monthly visitor counts and the daily figures are kept on our servers, not in the browser. These records are described in the Privacy Policy, Sections 3b and 5.

Consent. The pixel declares the analytics purpose only to Shopify's customer privacy settings, and Shopify runs it according to those settings: where the store asks visitors for consent, only if the visitor permits analytics; where the store does not ask, Shopify treats analytics as permitted and the pixel runs, also for visitors in the European Economic Area. The App does not read a consent signal itself. Where the law that applies to the store requires consent for any storage or processing through the App, the Merchant, who operates the store, is responsible for informing visitors and obtaining it through the store's consent settings. We do not use this data for cross-site tracking or advertising, and the pixel loads no third-party script.

---

5. Third-party cookies

The App does not load third-party scripts that set cookies. Any third-party cookies present on a Merchant's storefront (e.g. Google Analytics, Meta Pixel) are the responsibility of the Merchant.

---

6. Your choices

Merchants: you cannot opt out of the strictly necessary session cookies while using the Shopify Admin — they are required for the service to function. You can end your session by logging out of Shopify Admin.

Visitors: the App stores nothing in your browser (Section 4). Whether the pixel runs for you depends on the store's customer privacy settings and, where the store asks for your consent, on the choice you make. For questions about consent, or about the store's own cookies, including how Shopify's visitor identifier is kept, contact the Merchant whose store you used.

Most browsers let you control cookies and site data through their settings:

• Chrome: chrome://settings/cookies
• Firefox: about:preferences#privacy
• Safari: Settings → Privacy

---

7. Changes to this policy

We will update this policy if we introduce new cookies or storage technologies. Material changes are notified per the Privacy Policy, Section 13.

---

8. Contact

For questions about this Cookie Policy:

PÉCI Kft. Aradi utca 5., 2119 Pécel, Hungary Data / privacy matters: privacy@peci.io Legal notices: legal@peci.io