Privacy policy

Controller

The app "Sidrena cijena i cjenik" is published by amondi Media d.o.o., Radnička cesta 47, 10000 Zagreb, Hrvatska, tax number 20380401877, which also runs the server it is on.

The merchant installs the app on their own Shopify store. The data in that store and what is published from it stay the responsibility of the merchant, and this page describes what the app does with it.

What the app stores

The app stores only what the price history, the anchor price and the published price list need:

• the store domain, the store name, the primary domain, the currency and the time zone,
• the catalog of products and variants: title, vendor, type, status, price, compare at price, SKU, barcode, unit of measure and availability,
• the price history per variant, built from the moment of the installation, and the daily catalog snapshots,
• the anchor prices with their date, source, confidence and the evidence behind them,
• the generated price list files in CSV and XML,
• an audit log: which action was taken, on what and when, with the admin user as Shopify hands it over. With an offline token that is the label admin, and with an online token the e-mail address or the numeric id of the user,
• the imported anchor price files and their rows,
• the receipts of the Shopify webhooks about product changes,
• the session record: the store domain, the access token and its expiry. The app asks for offline tokens only, so the name and e-mail fields of that table stay empty.

What the app does not store

The mandatory Shopify topics customers/data_request and customers/redact are only acknowledged, because the app holds no record of any customer.

• customer data, orders and payment data. The app asks for neither read_customers nor read_orders,
• theme files. The read_themes scope reads one file, config/settings_data.json of the main theme, to tell whether the storefront embed is switched on, and writes none.

Where the data is processed

The server is in the European Union, with Hetzner Online GmbH, Falkenstein (FSN1-DC10), Germany. The database and the generated files live on that same server.

Apart from the Shopify Admin API, which the app uses to read the catalog and to write the anchor price metafields, no data goes to a third party. The app does not send email.

How long the data is kept

An uninstall deletes the access token and the session of the store right away, and the app generates nothing for that store afterwards. The remaining records stay until the Shopify shop/redact message arrives, which Shopify sends 48 hours after the uninstall. That deletes every record of the store and its directory of price list files.

A merchant who changes their mind inside those 48 hours and reinstalls the app finds their price history in place.

• price list files: 35 days, after which a daily job removes them from the disk and from the records. The last published file stays until a new one replaces it,
• Shopify webhook receipts: 7 days after they are processed,
• imported files: 7 days, and the import record with its rows 90 days,
• records of finished bulk operations: 30 days,
• closed alerts: 90 days,
• price history, catalog snapshots, anchor prices and the audit log: as long as the app is installed.

Cookies

The embedded admin runs inside the Shopify admin and uses Shopify session tokens rather than cookies of its own.

The public price list pages and this page set no cookies and measure no traffic.

Data published publicly

The price list is public because decision 1213 of NN 101/2026 requires it to be reachable by anybody, without a login, without cookies and without a check that the visitor is human. The anchor price and its date follow decision 1212 of NN 101/2026.

The published files carry no personal data. They carry product and variant titles, codes, vendors, units of measure, retail prices, unit prices, the special sale marker, anchor prices with their date, barcodes and availability.

This page describes what the app does. The merchant remains responsible for the content of their publication and for its interpretation.

Rights and contact

The merchant can ask for a copy or for the deletion of the data of their store at any time. Uninstalling the app starts the deletion, and it can also be requested directly.

Questions go to the registered address of amondi Media d.o.o..

Changes to this policy

When what the app does with the data changes, this page changes with it. The date of the last change is at the top.