Privacy Policy: Index Check

Last updated: October 16, 2026

Goodkeel Index Check ("the app") is a Shopify app made by Goodkeel, a project of Subverse LLC ("we", "us"). This policy explains what data the app accesses, stores and shares when a merchant installs it on a Shopify store and, if the merchant chooses to connect it, what it does with data from Google Search Console. The goodkeel.com privacy policy covers this website.

What the app does

The app shows which of a store's pages Google isn't indexing and why. It scans the public storefront, explains Search Console exports the merchant uploads, can add noindex tags to chosen kinds of storefront views, can hide chosen pages from search and, if the merchant connects Search Console, reads how Google indexes a sample of the store's pages.

Data we store

When you install the app, Shopify gives it an access token for your store. We store:

• your store's Shopify domain (for example your-store.myshopify.com);
• the access token and refresh token Shopify issues for the app, the permissions (scopes) you granted, and when the token expires;
• scan results: when each scan ran and, for each kind of storefront URL, how many the app found, a few example URLs, and what it found on them (status, canonical, noindex);
• the products, collections, pages and blog posts you hid from search through the app (their title, address and when), so the app can undo it;
• your storefront password, only if you choose to save it in the app. It is stored encrypted and used only to open your password-protected storefront the way a visitor would, so scans can read it. It is sent only to your own storefront, never shown back or logged, and you can remove it in the app at any time;
• if you connect Search Console, the data described under “Google Search Console data” below.

This is kept in a database hosted by Cloudflare (Cloudflare D1). We use it only to let the app work with your store. We do not store the names or email addresses of you or your staff.

Search Console files you upload to be explained are read in memory and not stored.

Store data the app reads

With the permissions you approve at install, the app reads products, collections, pages, blogs and articles (their handles, titles, tags, vendors and product types) to know which storefront URLs exist. It also fetches pages from your public storefront, the same way a visitor or search engine would, and reads your robots.txt and sitemap.

Shopify's install screen also lists "View staff and contributor data" (the contact details of the store owner and of blog contributors). Shopify includes this with the permission for online store content, which the app needs for pages, blogs and articles. The app never asks for those details and does not store them.

Data the app writes to your store

• The noindex rules you turn on are saved in a metafield on the app's own installation. The app's theme embed reads it and adds a robots meta tag to the matching pages. Shopify deletes this metafield when you uninstall the app.
• When you hide a product, collection, page or blog post from search, the app sets Shopify's seo.hidden metafield on it, and removes it when you unhide. Uninstalling the app does not unhide them, because the app can no longer reach your store; unhide them in the app first if you want them back in search.

Google Search Console data

Connecting Search Console is optional. If you connect, you sign in with Google and grant the app read-only access to your Search Console data (the https://www.googleapis.com/auth/webmasters.readonly scope). The app then:

• reads the list of Search Console properties your Google account can see, so you can choose your store's property;
• for that property only, reads URL Inspection results (whether Google has indexed a URL, the reason if not, the canonical Google chose, and when it last crawled) for a sample of your store's URLs, and the list of pages that appear in Search Analytics (page addresses only, not search queries);
• stores Google's refresh token, encrypted, so it can repeat these checks weekly without asking you to sign in again;
• stores the inspection results for your sampled URLs, so it can show you what changed from one week to the next.

The app cannot change anything in your Search Console account, and it does not read data for properties you didn't choose. We do not store your Google account's name or email address.

You can disconnect Search Console in the app at any time. Disconnecting revokes the app's access at Google and deletes the stored token and inspection results. You can also remove the app's access in your Google Account (Security > Third-party apps and services).

Limited Use. Goodkeel Index Check's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We use data from Google only to show you, in the app, how Google indexes your store's pages. We do not sell it, use it for advertising, or use it to develop, improve or train AI or machine learning models, and no person reads it except with your permission (for example, to answer a support request), for security purposes, or where the law requires it.

Customer data

The app does not request access to customers or orders, and it does not collect, store or process personal data about your customers. The theme embed adds a plain meta tag and an HTML comment to your pages. It sets no cookies and runs no scripts in your shoppers' browsers.

How we use data

We use the data above only to provide the app: to scan your storefront, explain your Search Console data, apply the fixes you turn on, and show you the results. We do not sell it, rent it, use it for advertising, or combine it with data from other sources.

Who we share it with

• Shopify, the platform the app runs on. Shopify handles installation, permissions and billing for the app under its own privacy policy.
• Google, only if you connect Search Console: the app sends Google your store's URLs to inspect, with your authorization, under Google's privacy policy.
• Cloudflare, Inc. (United States), which hosts the app's server and database. Cloudflare also processes standard request information, such as IP addresses, to deliver and protect the service.

We may also disclose information if the law requires it.

Where data is processed

Subverse LLC is based in the United States, and the app's data is stored and processed in the United States. If you are in the European Economic Area, the United Kingdom or Switzerland, your store's data is transferred to the United States to provide the app.

How long we keep it

We keep your store's data while the app is installed, and only the last few scans. When you uninstall the app, Shopify notifies us and we delete all of the data listed above for your store from our database right away, including any Search Console token and results. Shopify also sends a data deletion request (shop/redact) about 48 hours after uninstall; we delete any remaining data for your store when we receive it. Customer data requests and deletion requests from Shopify are answered, but we have no customer data to return or delete.

Our hosting provider keeps short-lived technical logs, which may include your store's domain, for troubleshooting.

Security

Data is sent over encrypted connections (HTTPS). Shopify access tokens are stored in our database and used only by the app's server. Your storefront password and Google refresh token are encrypted before they are stored. Messages from Shopify to the app are verified before they are acted on.

Your rights

You can ask what data we hold about your store, ask us to correct it, or ask us to delete it, by emailing hello@goodkeel.com. Uninstalling the app also deletes it. Depending on where you live, you may have other rights under data protection law, including the right to complain to your local data protection authority.

Changes

If we change this policy, we will update the date at the top of this page. If a change affects how we use your store's data or your Google data, we will tell you in the app before it takes effect.

Contact

Subverse LLC (Goodkeel)
Email: hello@goodkeel.com