Privacy Policy

Last updated: 26 September 2026

What we collect from merchants

When you sign in with Google we receive your email address and name — nothing else. We never request access to your Google Drive files; your product sheet is read only through the public view link you provide. We store your store configuration, orders, and (if you enable notifications) push subscription tokens.

What we process about buyers

When a buyer places an order, the details they enter (name, email, phone, address, note, custom fields) are stored so the merchant can fulfill the order. Alongside them we record the IP address, country and browser type the order was placed from and the time the store's terms were accepted, so the merchant can defend against payment disputes and refund fraud; the IP address and browser details are deleted 180 days after the order. We process this data on the merchant's behalf; the merchant is the data controller for their buyers. Buyer data is never sold, never used for advertising, and never published — it is visible only to the merchant of that store.

Cookies and analytics

Storefronts set no tracking cookies and load no trackers; store analytics are aggregate and cookieless (page counts, country, referrer — no personal identifiers). The merchant dashboard uses a session cookie strictly for login. This marketing website and the merchant dashboard use Google Analytics with Google Consent Mode: analytics cookies are set only if you accept the banner; if you decline, only anonymous, cookieless signals are sent (no cookies, no identifiers), which Google uses for aggregate conversion modelling.

If you arrive from a Google ad, we store the ad-click reference (gclid) in a first-party cookie for up to 90 days and, if you create an account, alongside it — used solely to tell Google Ads which advertising clicks led to signups, so we can measure our own advertising. It identifies a click, not you, and is never used for profiling or shared beyond that reporting. Likewise, when you create an account right after arriving from one of our ads, we record once, on the account, the campaign labels in that link (utm parameters, the landing page and, for Facebook or Instagram ads, Meta's click reference) - carried through the sign-in step itself, with no cookie - to know which ad brought you and, where Meta is concerned, to report that signup back to Meta's advertising measurement. These labels are never updated afterwards, never used for profiling, and are deleted with the account.

Marketing cookies (Meta). To measure our own advertising on Facebook and Instagram, this marketing website and the two confirmation pages after signing up or starting a trial load the Meta Pixel of Meta Platforms Ireland Ltd. - only after you accept the cookie banner, and never if your browser sends a Global Privacy Control signal. It sets the cookies _fbp and _fbc (purpose: ad measurement, retention 90 days) and reports page views, account creation and trial starts to Meta. We pass no name, email, phone or other personal data to Meta. Storefronts and the merchant dashboard never load it. You can withdraw consent at any time via "Cookie settings" in the footer, which stops the pixel and deletes both cookies.

Service providers

We run on Cloudflare (hosting, database, security). Google provides sign-in and sheet reading. Transactional email, where enabled, is delivered by our email provider. Stripe acts as a sub-processor for merchants who enable card payments: SpreadFront shares the order amount, currency, order reference, and the buyer's email with Stripe to create the checkout session, and receives payment status back; card data is entered only on Stripe's own pages and never touches SpreadFront. Other payments are handled by whatever provider the merchant chose.

Creem (creem.io) is the merchant of record for SpreadFront's own paid plans: when you upgrade, checkout runs on Creem's pages under Creem's privacy policy — Creem collects your billing details and payment method, handles taxes and invoices, and tells us only your subscription status. Your card data never touches SpreadFront.

Retention and your rights

Order data is kept while the store exists so merchants retain their business records. You can request access, correction, or deletion of your data — merchants via the dashboard or contact; buyers should contact their merchant first, or us if that fails, and we will assist in line with applicable law, including the EU General Data Protection Regulation (GDPR), which we treat as our baseline standard.

Security

All traffic is encrypted, secrets are stored in a dedicated secret store, sessions are cryptographically signed, and buyer data is never placed in any public location.

Contact

SpreadFront is operated by Draško Georgijev, who is the data controller for merchant account data (merchants are the controllers for their own buyers' data). Privacy questions: contact page.