DigiBorder privacy

Operated by acceleroi OÜ. Updated 2 November 2026.

DigiBorder helps merchants apply billing-country sales policies to non-shippable products.

Checkout processing

The validation Function runs on Shopify. For every store it receives the billing country and state or province, the shipping country, the country the buyer is shopping in, whether the buyer is logged in, whether the buyer has any of the merchant’s chosen customer tags, and, for each cart product, whether it requires shipping, is a gift card, or is in the merchant’s chosen collections or tags. It uses only what the merchant’s rule needs: the billing country for every rule, the other details only for Strict options the merchant turns on. These are read at checkout only, inside Shopify. DigiBorder’s web server does not receive or store checkout addresses, orders, customer profiles, IP geolocation, or checkout events.

Merchant settings and access

Rules are stored in an app-owned metafield on the Shopify validation. The app stores Shopify authentication sessions, shop domains, access tokens and refresh tokens in PostgreSQL to authenticate merchant access. The session adapter can retain merchant account fields supplied by Shopify; these are not buyer records.

Usage analytics

To improve DigiBorder, the app records how merchants use it: for example the plan, whether a rule is active, how many countries it lists and which options are turned on. It also records each store's install and uninstall dates, plan changes and the subscription amounts Shopify reports to us, including Shopify's uninstall reason code; anything a merchant writes when uninstalling stays in Shopify. These analytics records identify a store only by a pseudonymous key, never by its domain, and contain no buyer, order or checkout data. Our analytics provider keeps them for up to one year.

Ad measurement

To learn which of our Google ads lead to stores that start and pay for a plan, we send Google Ads, for stores that came from one of our ads, the ad click identifier from our website (see below), the plan's value and the amounts the store later pays for it. For stores outside the EEA, the UK and Switzerland we may also send a one-way hash (SHA-256) of the store owner's account email, which Google uses only to match it with signed-in Google users who clicked one of our ads; Google does not receive the email address itself. When the app first opens after an install, it also reads our website's visitor cookies, if your browser sends them, so we can tell which page or ad led to the install. We keep the email hash and this link until Shopify asks us to erase the shop's data after an uninstall.

Hosting and retention

Vercel hosts the merchant settings interface, Shopify runs the checkout Function, and Neon stores authentication sessions and the ad measurement records described above in PostgreSQL. Hosting providers may process ordinary HTTP request metadata under their policies. DigiBorder does not send checkout input to these providers. Sessions are deleted when the app is uninstalled and when Shopify requests shop erasure. Provider backups follow the operator’s configured retention policy.

Public website analytics

Our public website uses Google Analytics and our analytics provider to understand how visitors find and use it.

Before you choose, or if you decline analytics, nothing is stored on your device and the Google tag does not load. Our analytics provider still counts page visits, plays of the demo video and clicks on our App Store links without cookies. For this it receives the page address without personal parameters, the referring website, campaign tags, your browser and device type, and your IP address, which it uses to estimate your country and, combined with a value that changes every day, to count unique visits without recognizing you on later days.

With your permission, both services use cookies to recognize repeat visits and measure page visits, App Store link clicks and interactions with pricing, the example rule, the demo video and FAQs. Our analytics provider also records how you use the pages, including session recordings in which every form field is masked, and website errors. Recordings are kept for 30 days and other website analytics for up to one year. Declining analytics does not affect the website or app, and you can change your choice using Cookie settings. We save your preference in your browser.

Ads and campaign links. When you arrive from one of our ads or from a link with campaign tags, our server records the click identifier Google adds to the link (gclid, gbraid or wbraid), the campaign tags, the page you landed on, the referring website and your country, with a random visitor ID. The visitor ID is kept in a cookie on digiborder.app for up to 12 months and the click identifier for 90 days. Clicks on our App Store buttons are recorded with the same visitor ID. In the EEA, the UK and Switzerland this happens only after you choose Allow analytics; elsewhere it happens unless you choose Decline analytics. Declining removes these cookies and any recorded clicks not yet linked to an install. If you install DigiBorder, the link to your store is described under Ad measurement.

Website analytics is limited to the public website and privacy page. We do not add these tags to the installed Shopify admin app or checkout, and we do not send merchant settings, buyer details, authentication parameters or email addresses in our website events. Demo events describe only the sample choices in the website illustration. In the Google tag, advertising storage, advertising personalization and Google signals are disabled. Learn more in Google’s privacy policy.

Demo video. The video on our home page is hosted on YouTube. Nothing loads from YouTube until you press play. The video then plays in YouTube’s privacy-enhanced mode (youtube-nocookie.com), and Google receives your IP address and browser details to deliver it, under Google’s privacy policy.

App Store listing analytics

We also use Shopify’s Google Analytics integration for visits and installation activity on our App Store listing. Shopify’s completed installation event includes the app identifier and the merchant’s shop ID, shop name and shop URL. This helps us measure acquisition from the listing. Shopify manages data collection on its App Store; this does not add tracking to your storefront or send buyer checkout details.

Requests and support

Contact info@acceleroi.com for support and privacy requests. Shopify customer data requests contain no stored buyer records to export or erase. Merchants can pause their rule in DigiBorder or remove it in Shopify checkout settings.