Privacy policy
Last updated: 6 November 2026
Codform is a Shopify app that adds a cash-on-delivery order form to a store's product pages. This page explains, in plain words, what the app stores, why, where it's kept and for how long. It covers merchants who install the app and shoppers who use the order form.
Codform is run by Qays Kadhim, a licensed freelancer in Dubai, United Arab Emirates. Questions: support@codform.io.
The short version
- When a shopper orders, their name, phone number, address and the rest of the order go straight to the merchant's Shopify store. Codform doesn't keep a copy of the name, address or email.
- Codform keeps a secure fingerprint (a keyed hash) of the phone number, so it can limit repeated orders and apply the merchant's blocklist. A fingerprint can't be turned back into the number.
- We don't sell data, don't use it for advertising, and don't put tracking cookies on the store.
Shoppers who use the order form
What happens to your details
The form sends your name, phone number, city, address, the product, the quantity and any note you write to Codform's server, which uses them once to create the order in the merchant's Shopify store. From then on they're part of that store's orders, under the merchant's privacy policy.
What Codform keeps about an order
| What | Why |
|---|---|
| A secure fingerprint (keyed hash) of your phone number | To count recent orders from the same number (the merchant's hourly limit), to match the merchant's blocklist, and to prevent duplicate orders. |
| The Shopify order number and ID, the order's status and the time | So the merchant can see the form's orders, including attempts that were blocked or finished at checkout. |
Your IP address is turned into a fingerprint for a moment, only to check it against the merchant's blocklist. It isn't stored with the order.
If an order can't be created, you're taken to Shopify checkout with your details filled in. In that case Shopify handles your details, and Codform keeps only the fingerprint and status above.
Cookies and tracking
The order form doesn't set cookies, doesn't use local storage, and doesn't load anything from other websites.
Merchants who install the app
| What | Why |
|---|---|
| Your store's address (myshopify domain) and the access token Shopify gives the app | To create orders and read products in your store. |
| Your settings: form fields, cities, button text and colour, WhatsApp number, alert email and language | To run the form the way you set it up. |
| Your store's contact email, language and time zone, read from Shopify | To send alerts and the daily summary in your language and at the right time. |
| Your blocklist: a fingerprint of each phone number or IP address you block, and a masked label (for example +212 ••• 678) | To refuse orders from them, and so you can tell entries apart without the app keeping the full value. |
| Your plan and how many orders the form created this month | To apply the Free plan's monthly limit. |
| A record of alerts and summaries sent (order number, type, time) | To avoid sending the same alert twice. |
Alerts and summaries contain order numbers, counts and times, never a shopper's name, phone number or address.
Where data is kept, and who helps us
- Railway hosts the app and its database in the United States (US East).
- Resend sends alert and summary emails to the merchant.
- Cloudflare provides DNS for codform.io and hosts this website.
- Shopify runs the store, the orders and the billing for the app.
Our server logs never contain shoppers' details, access tokens or security signatures.
How long we keep it
- Order, alert and summary records are deleted automatically after 12 months.
- When a merchant uninstalls the app, we delete the access token right away, and Shopify asks us to delete everything else about the store 48 hours later. We do.
- When a shopper asks a merchant to delete their data, Shopify tells us and we delete that shopper's order records and blocklist entries.
- We keep encrypted nightly backups of the database for 30 days, after which each backup is deleted.
Your choices and rights
Shoppers: the merchant decides how your order is used, so contact the store first. The store can ask Shopify to send us a data request or a deletion request, and we answer it. You can also write to us at support@codform.io.
Merchants: you can see and change your settings and blocklist in the app at any time, and uninstalling removes your data as described above.
Depending on where you live (for example under the GDPR), you may have rights to access, correct or delete your data, or to complain to a data protection authority. For shopper data, the merchant is responsible for the data and Codform processes it on their behalf.
Security
Phone numbers and IP addresses are stored only as keyed fingerprints. Data travels over HTTPS. Access to the server and database is limited to the people who run Codform.
Changes
If we change what we store or why, we'll update this page and the date at the top.