Privacy policy

Last updated November 5, 2026

Tintwork is a Shopify app made by DCODED. It lets Shopify merchants offer a product customizer where shoppers choose colors and styles and add their own images. This policy explains what data Tintwork handles, why, and how long it is kept.

Data we collect from merchants

• Your shop domain and the access token Shopify issues when you install the app.
• Your customizer settings: the product, part names, colors, options and links to your layer images.

Data about your customers

When a shopper uploads a logo or photo, or adds a customized product to the cart, the image passes through Tintwork on its way to your store's Shopify Files, and the link is saved on the cart and order by Shopify. Tintwork doesn't keep a copy of these images and has no access to customers or orders. We never see or store your customers' names, emails, addresses or orders. The images belong to your store and you can delete them in Content → Files.

How the data is used

Only to run Tintwork for your store and answer your support requests. We do not sell data, use it for advertising, or share it with anyone except the services below.

Services that process data

• Shopify, where the app runs and where your files are stored.
• Fly.io, which hosts the app and its database in the United States on encrypted storage.

This website

tintwork.dcoded.dev may use Google Analytics to count visits and see which pages are useful. It sets cookies and receives your IP address and browser details. We don't combine this with app data. You can block it with any tracker blocker or Google's opt-out add-on. The live demo on this site uses sample images only and doesn't accept uploads. The Tintwork app inside Shopify and the block in your store don't use analytics.

Retention and deletion

• When you uninstall Tintwork, Shopify asks us to delete your shop's data after 48 hours, and we delete all of it then.
• Files shoppers uploaded stay in your Shopify Files, under your control.

Security

Data is sent over HTTPS and stored on an encrypted volume. Credentials are kept as encrypted secrets, separate from the code.

Contact

Questions about privacy: tintwork@dcoded.dev.