Privacy Policy — GTM & GA4 Data Layer

Last updated: 2026-10-12

GTM & GA4 Data Layer (“the app”) is a Shopify app operated by EarnToLink (언투링크), a sole proprietorship registered in the Republic of Korea. This policy explains what the app collects when a merchant installs it, how it is used and how it is deleted.

Information the app stores

• Your shop domain and the access token Shopify issues at install (to call the Shopify API on your behalf).
• Your settings: GA4 measurement ID, Google Tag Manager container ID, server-side tagging URL and options. The container ID is also saved in an app metafield in your store so the theme embed can read it.
• While debug mode is on (30 minutes at a time): a log of the events the pixel produced — GA4 event name, page path without query string, the GA4 data layer object (products, prices, order value, order ID) and the GA4 request with the visitor's client and session IDs masked.
• An activity log of setup changes and errors.

Information the app reads but does not keep

• Customer events from Shopify's Web Pixels API (page, product, collection, search, cart and checkout events) are processed in the shopper's browser inside Shopify's sandbox and sent directly to Google Analytics 4 or to your own server-side tagging URL. They do not pass through our servers, except the debug-mode copies described above.

Your customers’ personal data

The app stores the following personal data of your customers, only to provide the feature you enabled:

• Sent from the shopper's browser to Google (not stored by us): page URL, referrer and title, a pseudonymous GA client ID and session ID (first-party cookie _ga or local storage), browser language, products viewed or bought, cart and order values, order ID, coupon codes, search terms, and the shopper's ad-consent choice.
• No email address, name, phone number or address is sent by this app.
• The pixel runs only for shoppers who allowed analytics under Shopify's Customer Privacy settings; the GTM container receives Consent Mode v2 signals from the same settings.

It is deleted when Shopify sends a customers/redact request for that customer, and all shop data is deleted on shop/redact (48 hours after uninstall).

How the information is used

Only to provide the app’s features to you. We do not sell data, do not use it for advertising, and do not use it to train AI models.

Where it is stored

On Cloudflare (Workers and D1 database) in Cloudflare’s global network. Data is encrypted in transit (HTTPS) and at rest (Cloudflare D1 storage encryption). Billing is handled by Shopify; the app never sees payment card details.

Retention and deletion

• Debug-mode logs are deleted after 7 days (and capped at 300 per store).
• App activity logs are deleted after 30 days.
• All app data is deleted 48 hours after uninstall (shop/redact).

When you uninstall the app, we stop accessing your store. Shopify then sends a shop/redact request and we delete all data of your shop. You can ask for deletion at any time by email.

Your rights

You (and your customers, through you) can request access, correction or deletion of personal data. Requests that come through Shopify’s customers/data_request are answered within 30 days.

Terms and data processing

Use of the app is governed by our Terms of Service and Data Processing Addendum, which form the data protection agreement between you (the merchant, as controller) and us (as processor).

Contact

EarnToLink — help@earntolink.com