Sticky Cart
A sticky add-to-cart bar that stays out of the way.
- Appears on scroll
- Variant and quantity
- Never touches checkout
Planned price: $4.99/month, 7-day free trial
Privacy policy
What Sticky Cart by Gizmonger does with data
Where it runs
The bar is a small script in your storefront, delivered by Shopify as a theme app embed. It runs in the shopper’s browser. The app’s backend, which Technobabble d.o.o. operates, only handles installation.
Permissions
The app requests no Shopify API access scopes.
What it reads
- The product shown on the page (title, image, variants, availability and the price text your theme renders), from the page itself.
What Shopify stores for the app
- Bar settings (position, texts, colors, visibility), saved in your theme’s app embed settings.
What we store
- Your store’s myshopify.com domain, the app’s Shopify access and refresh tokens and the granted scopes, needed to install the app and show its setup page.
Data sent outside Shopify
Only the session record listed under “What we store”. No data goes to any third party.
Data residency
Nothing about shoppers or carts leaves the storefront: Add to cart posts to your own store’s cart, handled by Shopify. The app’s backend, on a server we operate in Croatia (EU), holds only the session record listed above.
When you uninstall
When you uninstall, Shopify notifies the app and we delete the store’s session record. Shopify removes the app embed from your theme.
Shopify privacy webhooks
Our Shopify apps subscribe to Shopify’s mandatory privacy webhooks and handle them like this:
| Webhook | What we do |
|---|---|
customers/data_request | Acknowledge it. The apps hold no data about your customers, so there is nothing to export. If you ask us, we confirm this in writing to the store owner within 30 days. |
customers/redact | Acknowledge it. There is no customer data to delete. |
shop/redact | Sent by Shopify 48 hours after you uninstall. We delete everything we hold for the store (the session record), if anything is left after the uninstall. |
app/uninstalled | Delete the store’s session record right away. |
Requests that fail Shopify’s signature (HMAC) check are rejected and not acted on.
Who we are
Gizmonger is a brand of Technobabble d.o.o., Vukovarska 113, 21000 Split, Croatia, OIB 37185004123 (“we”, “us”). Contact: gizmonger@technobabble.hr.
This policy covers the Gizmonger apps and this website. Each app also has its own data section: what it reads, what is stored and where. The platforms our apps run on (Atlassian, Shopify, Wix) handle your account, billing and the data in your site or store under their own privacy policies: Atlassian, Shopify, Wix.
Our role under the GDPR
- Controller for email you send us and for the access logs of this website: we decide why and how that data is used.
- Processor for data we handle on behalf of the business that installs an app. Today that means the Shopify apps: the session record we keep for each store and the logs of requests the store sends to the app’s backend. The merchant is the controller; we use that data only to provide the app.
- Clear Gadgets for Jira and the Wix apps send no data to us, so we hold nothing from them as either controller or processor.
How our apps treat data
- Each app reads only what it needs to show its result and asks for the fewest permissions that allow it.
- The apps keep no copies of your issues, products, posts, customers or orders.
- No app sends data to analytics, advertising or other third-party services.
- We don’t sell personal data or share it for advertising.
When you email us
If you write to gizmonger@technobabble.hr, we receive your name, email address, the message and anything you attach, and use them to answer you and fix the problem you report. Legal basis: our legitimate interest in answering requests, or taking steps at your request (GDPR Art. 6(1)(f) and (b)). We keep support emails for two years after the last message in the conversation, then delete them. We delete them sooner on request, unless the law requires us to keep them.
Mail to gizmonger@technobabble.hr is received by Cloudflare Email Routing and delivered to a Gmail mailbox; our replies are sent through Brevo. Cloudflare and Brevo process that mail on our behalf under their data processing terms. The mailbox is a standard Gmail account, so Google handles the mail kept there under the Google Terms of Service and its privacy policy. Cloudflare and Google may process data outside the EEA and rely on the EU Standard Contractual Clauses for such transfers; Brevo is based in the EU.
This website
This website sets no cookies, uses no analytics and loads nothing from third parties. Like any web server, it records technical access logs (IP address, time, requested page, browser user agent). We use them only to run and protect the site and keep them for 30 days. Legal basis: our legitimate interest in running a secure website (GDPR Art. 6(1)(f)).
Our servers
This website and the backends of our Shopify apps run on a server we operate ourselves in Croatia (EU). No cloud hosting provider is involved. The Shopify backends keep one session record per store (see each app’s data section), which they need to provide the app you installed, and the same kind of technical access logs as this website. For this data we act as the merchant’s processor (see our role). Access logs and server logs are kept for 30 days.
Service providers
- Cloudflare: receives mail sent to gizmonger@technobabble.hr and forwards it (Cloudflare Email Routing).
- Google: the Gmail mailbox where that mail is kept (a standard Gmail account, under Google’s own terms).
- Brevo: sends our email replies.
Atlassian, Shopify and Wix are not our service providers: they run the platforms our apps are installed on, under their own privacy policies.
Your rights
Under the GDPR you can ask us for access to your personal data, correction, deletion, restriction, a portable copy, or object to processing. Email gizmonger@technobabble.hr; we answer within one month. How we handle requests that come through Atlassian, Shopify or Wix is described on the data requests page. You can also complain to the Croatian data protection authority, AZOP (azop.hr), or the authority where you live.
Children
Our apps are business tools and are not meant for children.
Changes
If we change how an app handles data, we update this page and the app’s data section before the change ships. Apps on the roadmap that aren’t built yet get their own data section here before they are released.