Privacy Policy: Hreflang Manager

Last updated: October 11, 2026

Goodkeel Hreflang Manager ("the app") is a Shopify app made by Goodkeel, a project of Subverse LLC ("we", "us"). This policy explains what data the app accesses, stores and shares when a merchant installs it on a Shopify store. The goodkeel.com privacy policy covers this website.

What the app does

The app adds hreflang tags to a Shopify storefront, so search engines can tell which version of a page is meant for which language and market. It reads the store's market, language and translation settings, works out the right alternate URLs for each page, and saves them to the store. It can also check the public storefront for hreflang problems and report them to the merchant.

Data we store

When you install the app, Shopify gives it an access token for your store. We store:

• your store's Shopify domain (for example your-store.myshopify.com);
• the access token and refresh token Shopify issues for the app, the permissions (scopes) you granted, and when the token expires;
• the alternate URLs the app works out for your pages, and when it last synced them;
• audit results: when each audit ran, how many pages it checked, and each finding (the page URLs involved, what was wrong, and the fix);
• the result of the app's setup check and which plan your store is on (Free or Pro);
• your storefront password, only if you choose to save it in the app. It is stored encrypted and used only to open your password-protected storefront the way a visitor would, so the setup check and audits can read it. It is sent only to your own storefront, never shown back or logged, and you can remove it in the app at any time.

This is kept in a database hosted by Cloudflare (Cloudflare D1). We use it only to let the app work with your store. We do not store the names or email addresses of you or your staff.

Store data the app reads

With the read-only permissions you approve at install, the app reads:

• markets, and their domains and subfolders;
• the languages published on your store;
• translations, so it can use each language's URL handle;
• products, collections, pages, blogs and articles (their URL handles and whether they are published in each market);
• publications (which sales channels and markets each item is available in).

The app also fetches pages from your public storefront, the same way a visitor or search engine would, to check its hreflang tags.

The app uses this information to build the hreflang tags. It does not copy it into our database.

Shopify's install screen also lists "View staff and contributor data" (the contact details of the store owner and of blog contributors). Shopify includes this with the read permission for online store content, which the app needs for pages, blogs and articles. The app never asks for those details and does not store them.

Data the app writes to your store

The app saves its results in metafields in your Shopify store, under a namespace reserved for the app. They contain only URLs, URL handles, and language and market codes. They are read by the app's theme embed, which adds the hreflang tags to your storefront pages.

Customer data

The app does not request access to customers or orders, and it does not collect, store or process personal data about your customers. The theme embed adds plain link tags to your pages. It sets no cookies and runs no scripts in your shoppers' browsers.

How we use data

We use the data above only to provide the app: to add hreflang tags, keep them up to date when your store changes, and run audits. We do not sell it, rent it, use it for advertising, or combine it with data from other sources.

Who we share it with

• Shopify, the platform the app runs on. Shopify handles installation, permissions and billing for the app under its own privacy policy.
• Cloudflare, Inc. (United States), which hosts the app's server and database. Cloudflare also processes standard request information, such as IP addresses, to deliver and protect the service.

We may also disclose information if the law requires it.

Where data is processed

Subverse LLC is based in the United States, and the app's data is stored and processed in the United States. If you are in the European Economic Area, the United Kingdom or Switzerland, your store's data is transferred to the United States to provide the app.

How long we keep it

We keep your store's data while the app is installed. When you uninstall the app, Shopify notifies us and we delete all of the data listed above for your store from our database right away. Shopify also sends a data deletion request (shop/redact) about 48 hours after uninstall; we delete any remaining data for your store when we receive it. Customer data requests and deletion requests from Shopify are answered, but we have no customer data to return or delete.

Our hosting provider keeps short-lived technical logs, which may include your store's domain, for troubleshooting.

Security

Data is sent over encrypted connections (HTTPS). Access tokens are stored in our database and are only used by the app's server. Messages from Shopify to the app are verified before they are acted on.

Your rights

You can ask what data we hold about your store, ask us to correct it, or ask us to delete it, by emailing hello@goodkeel.com. Uninstalling the app also deletes it. Depending on where you live, you may have other rights under data protection law, including the right to complain to your local data protection authority.

Changes

If we change this policy, we will update the date at the top of this page. If a change affects how we use your store's data, we will tell you in the app before it takes effect.

Contact

Subverse LLC (Goodkeel)
Email: hello@goodkeel.com