Shopify · Shopify Privacy Policy

Cross-Context Behavioral Advertising via Shop App

High severity
Share 𝕏 Share in Share

What it is

We may use your personal information to send you targeted advertisements or marketing communications we think may be of interest to you. As part of this, we may share or make available information (such as email addresses or other contact information) with advertising partners who help us deliver these advertisements.

Why it matters

The Shop App aggregates your purchase history across multiple independent merchants, creating a behavioral profile used for targeted advertising — a data use that goes well beyond what most consumers expect from a checkout platform.

Consumer impact

Shopify collects a wide range of personal data including contact details, payment information, browsing behavior, device identifiers, and purchase history from both merchants and end consumers shopping at Shopify-powered stores. This data is shared with an extensive network of third parties including advertising platforms, fraud detection vendors, payment processors, and third-party app developers, meaning your shopping behavior across multiple stores may be aggregated and used for targeted advertising without your explicit awareness. You can opt out of cross-context behavioral advertising and exercise data access or deletion rights by visiting Shopify's privacy request portal at https://privacy.shopify.com/en/consumer.

What you can do

⚠️ These actions may provide transparency or partial mitigation but may not fully address the underlying issue. Effectiveness varies by jurisdiction and individual circumstances.
  • Opt Out of Arbitration
    Visit Shopify's consumer privacy portal at https://privacy.shopify.com/en/consumer, select 'Do Not Sell or Share My Personal Information,' and follow the on-screen verification steps.

Applicable agencies

  • FTC
    The FTC has enforcement authority under Section 5 of the FTC Act over unfair or deceptive data sharing practices related to behavioral advertising.
    File a complaint →
  • State AG
    California's Privacy Protection Agency and AG enforce CPRA opt-out rights for cross-context behavioral advertising.
    File a complaint →

Provision details

Document information
Document
Shopify Privacy Policy
Entity
Shopify
Document last updated
March 24, 2026
Tracking information
First tracked
March 15, 2026
Last verified
April 4, 2026
Record ID
CA-P-002220
Document ID
CA-D-00122
Evidence Provenance
Source URL
Wayback Machine
SHA-256
929225abb20671960ed1f40a6325a4c72cf5ea341e79aa8378056b3b66ef5708
Verified
✓ Snapshot stored   ✓ Change verified
How to Cite
ConductAtlas Policy Archive
Entity: Shopify | Document: Shopify Privacy Policy | Record: CA-P-002220
Captured: 2026-03-15 11:22:02 UTC | SHA-256: 929225abb2067196…
URL: https://conductatlas.com/platform/shopify/shopify-privacy-policy/cross-context-behavioral-advertising-via-shop-app/
Accessed: April 6, 2026
Classification
Severity
High
Categories

Other provisions in this document