Rackwalk privacy policy
Last updated 2026-09-24. Rackwalk is run by Bite Forest LLC.
Rackwalk is a Shopify app for counting stock by bin. I built it to be as small as possible in what it reads and keeps, so this page is short. If anything here is unclear, email me at fieldcartops@gmail.com.
What I store
- Your shop's myshopify domain and the access token Shopify issues so the app can read your catalog and, if you turn that on, write inventory corrections.
- Product and variant titles, SKUs and inventory item ids for the variants you count. This is a copy of your own catalog, kept so the phone screen works without a Shopify login.
- Your bin layout: racks, shelves and cubbies, their labels, capacities, condition grades and any notes you type on them.
- Count observations: which variant was seen in which cubby, how many, when, and the name of the walk link that recorded it.
- Walk links: a name you give each link and a hash of its secret. The secret itself is never stored, which is why a link is shown only once.
- Reports and, in push mode, a record of each correction sent to Shopify and Shopify's response.
- Picks. When an order is fulfilled, Shopify sends the app a fulfillment webhook so it can take the shipped boards out of their cubbies. From that webhook I keep the order number, the fulfillment and line item ids, the variant ids, the quantities and the location it shipped from. I never store the customer's name, address, email or phone; those fields arrive in the webhook and are dropped on the spot.
What I do not store
No customer data. The app never reads customers, addresses, emails or payment details. It reads orders only to learn which variants and quantities shipped and from where, and it asks for that access at the minimum level, with no customer fields. The Shopify permissions it asks for are read_products, read_inventory, read_locations, write_inventory, read_fulfillments and read_orders. Staff who count on a phone open a walk link; they do not log in, and I keep no account or personal details about them.
Where it lives
On a single server hosted by Fly.io in the United States (Ashburn, Virginia), in a SQLite database on an encrypted volume. Data is not sent to any third party, not used for advertising, and not sold. Nothing leaves that server except the requests the app makes to Shopify's API on your behalf.
When it is deleted
When you uninstall Rackwalk, Shopify sends the app/uninstalled webhook and the app deletes everything it holds for your shop right away: the layout, the catalog copy, every count, every walk, every walk link and the access token. The app also answers Shopify's mandatory privacy webhooks (customers/data_request, customers/redact, shop/redact); the first two have nothing to return or remove because no customer data is kept, and shop/redact runs the same full deletion again as a backstop.
Want your data gone while the app is still installed, or want a copy of it? Email me and I will handle it within a few days. The Layout and report pages also export CSVs you can keep yourself.
Changes
If this policy changes I will update the date at the top. Material changes get a note in the app.
Contact
Bite Forest LLC
fieldcartops@gmail.com