Privacy policy
Last updated September 30, 2026
Mint Age Check is a Shopify app made by Mint Labs ("we", "us"). It adds a self-declared age check to a merchant's online store: shoppers confirm they're old enough, or type their date of birth. It is not identity or ID verification. This policy explains what the app handles, why, and when it's deleted.
The short version
- We store the merchant's settings. We don't collect or store anything about the merchant's shoppers: no birth dates, ages, answers, IP addresses, visitor IDs, names or emails.
- A date of birth typed into the check is used for the age calculation in the shopper's own browser, then cleared from the form. It is never sent to us, to the merchant or to Shopify.
- The storefront script makes no requests to our servers. It remembers the shopper's answer in a first-party cookie on their own browser — no tracking, no analytics, no advertising.
- We never sell or share data, or combine it across stores.
Information about merchants
| Information | Why |
|---|---|
| Store domain and a Shopify access token | To save the settings where the theme app embed and the checkout rule read them, let the product and collection pickers work, read the store's product tags (to match tag rules exactly), and read the live theme's settings file to show whether the app embed is turned on. |
| Settings: minimum ages (and per-country ages), Yes / No or date of birth mode, where the check shows (product and collection IDs with their titles, product tags), how long answers are remembered, the exit address, checkout confirmation and its message | To run the age check the way the merchant set it up. |
| Plan and subscription status | Read from Shopify to decide which features apply. Payments are handled entirely by Shopify. |
| Whether the last update to Shopify succeeded | To show problems on the app home and retry. |
Information about the merchant's shoppers
| Information | How it's used | Where / how long |
|---|---|---|
| Date of birth (date of birth mode) | Used in the shopper's browser to work out whether they meet the minimum age, then cleared from the form. The fields ask common session-recording tools not to capture them. | Not stored or sent anywhere |
Cookie mint_age (first-party, on the store's domain) | Remembers that the shopper confirmed a minimum age, holding only that age (for example 21) so they aren't asked on every page. No identifier. | Shopper's browser, for the number of days the merchant chose (0–365; 0 = until the browser closes) |
Session storage mint_age_denied | Remembers a "no" answer (only the minimum age that was asked) so the message stays for the rest of the visit. | Shopper's browser, until the tab is closed |
| Cart attribute "Age confirmed" (only with checkout confirmation) | Saved in the shopper's cart through Shopify's cart API (for example "21+"), so the app's Shopify Function can check it at checkout. Shopify keeps it on the order, where the merchant sees it. It never reaches us. | In the merchant's Shopify store, with the order |
| Cart contents, storefront country and language (only with checkout confirmation) | Read by the app's Shopify Function inside Shopify's checkout to decide whether the confirmation is needed and which minimum age applies. Functions can't send data anywhere. | Not stored |
Because the app holds no data about shoppers, Shopify's customer privacy requests (customers/data_request, customers/redact) have nothing to return or delete; we acknowledge them. When a store is deleted (shop/redact, sent 48 hours after a merchant uninstalls) we permanently delete everything we hold for the store.
Merchants may want to mention the mint_age cookie in their own store's privacy or cookie policy.
Where data is processed and how it's protected
The app runs on Cloudflare (hosting and database) and connects to Shopify's APIs. The storefront files are served by Shopify. Data is encrypted in transit (TLS) and at rest. Access is limited to Mint Labs staff who need it to provide support. We use no other sub-processors, analytics or trackers. See our security policy.
Retention
Settings are kept while the app is installed and deleted 48 hours after uninstall (so a quick reinstall doesn't lose them). Access tokens are deleted as soon as the app is uninstalled.
Your rights
Depending on where you are, you may have the right to access, correct or delete information about you. Merchants can contact us directly and change their settings in the app at any time. Shoppers can delete the cookie in their browser at any time. We respond within 30 days.
Changes
If we change this policy we'll update the date above and, for significant changes, notify merchants in the app.
Contact
Mint Labs — support@stickermint.com