Cart Shield support

It scores your storefront visits and your orders for signs of fraud and scripted checkouts, shows you why each one scored the way it did, and writes its verdict into the Order risk panel of each order in your Shopify admin. The score comes from fixed rules — lists, ranges, counts and fixed weights — that are the same on every store.

Not unless you switch it on: every action is off when you install. Blocking rules, holding flagged orders, tagging them, cancelling and refunding, the checkout check and the decoy product are each a separate setting on the Protection page. Cancel and refund acts only on an order that meets the strictest bar, and Cart Shield checks your allow list first; if it cannot tell, it does nothing.

Not for scoring. Cart Shield connects its web pixel when you open the app. The checkout check is different: it needs its app embed switched on in your theme editor, and the Protection page tells you when the check is on but the embed is off.

It refuses a cart only when our server has marked that cart as failed, or when it holds the decoy product. A cart with no mark at all is let through, because Shopify also runs checkout for draft orders, wallet buttons and other channels where the check never runs. If our server cannot be reached, every cart passes. Start it in Monitor to see what it would have done before it refuses anything.

Its database keeps counts, true/false findings and codes made from a value, never the value itself — no readable email, street address or IP address. An order's IP address is checked and then discarded; a keyed code of it is kept for 3 days (30 if the order scored Strong), and a keyed code of the shipping address for 30 days. Order records keep the order id, name and total, and two hashes of the buyer's email. No device fingerprint, no recording of mouse movement or keystrokes. Every item, and how long it is kept, is in the privacy policy.

Shopify, which runs the store and the checkout, and the server in Sydney that runs the app. Beyond that, one thing leaves: an order's IP address, sent to the IP lookup services named in the privacy policy after Shopify has already been told the order arrived. Nothing is sold or used for advertising.

An optional, unlisted product that no customer is shown. The checkout check lists it in a place only a script reads, and a cart that holds it is refused. Turning the decoy off archives it. Uninstalling Cart Shield leaves it in your store, because the app has no access left to remove it — delete it from Products if you uninstall.

Your sign-in session is deleted at once. Shopify sends shop/redact about 48 hours later, and Cart Shield then deletes your shop's visits, orders, rules, settings and counts. Daily backups expire on their own about 30 days later. Tags it added to orders and customers, and the decoy product if you used it, stay in your store as ordinary Shopify data.

Cart Shield's data processing agreement is in force for every merchant from install, with no signature needed. If your process needs a countersigned copy or the Standard Contractual Clauses, email us.

Open the Support page inside the app, or email support@sushinet.fyi. Both land in the same help desk, and the person who answers is the person who wrote the app.