Privacy and your data
What Teacup Quiz stores about shoppers and about you, what it keeps in shoppers’ browsers, how long it keeps data, how it handles GDPR requests and consent, and what happens when you uninstall.
#The short version
- Quiz activity is stored without names, emails, IP addresses or device IDs.
- The only personal data is what shoppers type into your email step: their email, phone number and answers.
- Your quizzes live in your own Shopify store’s app data, not on Teacup’s servers.
- Quiz runs and orders from quizzes are deleted after 13 months, emails after 24 months.
- Shopify’s privacy requests are handled automatically, except data requests, which you answer with an export.
- Teacup Quiz never sells data, uses it for advertising or combines it across stores.
This article explains what that means for your store. The legal text is the privacy policy.
#What’s stored about shoppers
| Data | What it holds | Kept |
|---|---|---|
| Quiz runs | One per shopper who answers the first question, under a random ID made in their browser: the answers, the results shown, whether they finished, products added to the cart, orders that followed and their value, phone or computer, the site or campaign they came from, and the store language. No names, emails, IP addresses or device IDs. | 13 months |
| Daily counts | Per quiz and day: views, starts, completions, answers and adds to cart. | While the app is installed |
| Orders from quizzes | The order’s ID, currency, which quizzes’ products it contained and their value. No name, address or contact details. | 13 months |
| Emails | Only from your email step: the email, the phone number if given, the profile answers and whether the shopper ticked your marketing box. | 24 months |
What shoppers type in “Or tell us in your own words” goes to the AI to pick their answers and is never stored.
To protect your store from abuse, Teacup’s servers briefly count requests per IP address in memory. These counts are never written to disk.
#What’s stored about you
- Your store’s Shopify domain and the access Shopify gives the app when you install it.
- The name and email of the staff member who opens the app, as Shopify provides them.
- Your store’s name and email, and the address under Settings → Send to.
- Your plan and your Shopify subscription. Teacup Quiz never sees card details: Shopify handles billing.
- Your Klaviyo or Omnisend key, or Klaviyo’s one-click access, if you connect them. These are stored encrypted.
- Your settings, A/B tests and AI usage counts.
Your quizzes, their translations and their published versions are saved in your store’s own app data in Shopify. Teacup Quiz reads your products and collections to show them in quizzes, and changes them only if you turn on “Good for”: then it writes one product field, and removes it when you turn it off. See “Good for” and AI shopping agents.
#What’s kept in the shopper’s browser
| Where | Name | What it’s for |
|---|---|---|
| Session storage | teacup:{quiz ID} | The shopper’s progress in a quiz, so a reload doesn’t lose their answers. Used only within an hour, and gone when the tab closes. |
| Session storage | teacup-test | Marks your own test visit, opened with ?teacup_test, so it isn’t counted. From the app’s Open your store and Try it on your store, it holds their private test code, so your test emails can repeat. |
| Local storage | teacup:auto | The popup already opened by itself once in this browser, so it doesn’t open again. |
| Local storage | teacup:test:{test ID} | Which version of a quiz this browser gets during an A/B test, so the shopper keeps seeing the same one. |
| Local storage | teacup:answers | The questions and answers of the last quiz the shopper finished, so your own pages can use them (see Quiz events for your own tracking). Never sent anywhere, and not kept when the shopper declines preference cookies. |
| Cookie | teacup_ref | First-party, for 7 days, only when the shopper allows analytics. Holds the quiz, the numbers of the products it recommended and the run’s random ID, so an order of those products can be counted. Nothing about the shopper. |
#Consent
Teacup Quiz follows the choices shoppers make in your store’s cookie banner (Shopify’s customer privacy settings).
- Shoppers who turn down analytics can still take your quizzes and leave their email. Their views, runs and orders aren’t recorded, the
teacup_refcookie isn’t set, and their completed quizzes aren’t counted toward your plan. - The Teacup web pixel, which counts orders, only runs for shoppers who allow analytics. It never runs for marketing.
- Quiz events go to Google Analytics only when the shopper allows analytics, and to Meta and TikTok only when they allow marketing. See Tracking events.
- Email marketing consent comes only from the marketing box in your email step, which starts unticked. A shopper who doesn’t tick it is never subscribed, in Shopify, Klaviyo or Omnisend.
#Privacy requests (GDPR and CCPA)
When a shopper asks your store to see or erase their data, Shopify passes the request on to every app, Teacup Quiz included:
| Shopify’s request | What Teacup Quiz does |
|---|---|
| A customer asks for their data | Nothing automatically. You answer it with an export, as below. |
| A customer asks to be erased | Deletes their emails, matched by email address or phone number, with the quiz runs they came from (the answers), the orders Shopify lists in the request with their quiz runs, and anything still waiting to be sent to Klaviyo. Other quiz runs hold nothing that identifies them. |
| Your store’s data is erased, after you uninstall | Gives up access to your Klaviyo account and deletes everything Teacup Quiz holds for your store: emails, settings, analytics, quiz runs, orders, AI usage and A/B tests. Only the date your free trial started is kept, so there’s one trial per store, and whether you’re a founding store, so you keep your discount. |
Answer a data request
- Open Emails and click Export CSV.
- Find the shopper’s rows by their email or phone number.
- Send them those rows: their email, phone, marketing choice, quiz, date and answers.
#Who processes data
- Shopify, which hosts the app in your admin and on your store, and handles billing.
- Render (United States), which hosts Teacup’s servers and database.
- Anthropic, for AI: drafting and translating quizzes (product details, quiz texts and your note) and answers in shoppers’ own words (the words and the question’s answers). Never shopper names, emails or other shopper details. Under its commercial terms, Anthropic doesn’t train on this data.
- Klaviyo and Omnisend, only if you connect your own account.
- Resend (United States), which delivers Teacup’s emails to you. Never shopper data.
- Crisp, which runs the support chat: only what you write in it.
#When you uninstall
- Shopify cancels your subscription, and your quizzes come off your store.
- The Teacup MCP address stops working.
- Your data isn’t deleted at once. Shopify sends its request to delete your store’s data about 48 hours after you uninstall, and Teacup Quiz then deletes everything it holds for your store, as in the table above.
- Your quizzes are stored in your store’s app data in Shopify, not on Teacup’s servers.
There’s no setting in the app to delete data while it’s installed. Runs and orders from quizzes are removed after 13 months and emails after 24, and shoppers’ erasure requests are handled as they come.
#The full privacy policy
Read the complete privacy policy, including how data is secured and your rights as a merchant. It shows the date it was last updated at the top.
Still need help?
Chat with us: you talk to a real person, not a bot. Or email us with your store’s address (your-store.myshopify.com).