Privacy policy
Last updated: October 23, 2026
Geoblok is a Shopify app made by Index, a technology and marketing agency based in Montreal, Canada. It lets merchants block, redirect or limit analytics for storefront visits by country or by IP address. This policy explains what the app processes, for merchants who install it and for the visitors of their stores.
Data about merchants
- Store and contact details: the store domain and a contact email, read from Shopify at install (or the email you enter in Settings). We use it to send setup and service notices about the app.
- Access tokens: the Shopify session the app needs to read your theme settings and answer storefront checks.
- Your settings: country rules, IP rules (the exact IP addresses you choose to allow or block), redirect URLs and display preferences.
Data about store visitors
When the app is enabled on a store, each storefront page view asks the app whether the visit is allowed. To answer, the app uses:
- The visitor's IP address, to determine their country. The lookup runs on our own server against a local copy of the DB-IP country database: the IP address is never sent to DB-IP or any other geolocation service.
- The country selected by the store, used when the visitor's country cannot be determined.
- The page path being visited.
The IP address is not stored as is. If the merchant turns activity logs on, the app keeps, for each check: a salted one-way hash of the IP address (it cannot be turned back into the address), the country, the action applied, the page path and the time. Logs are deleted after 30 days. With logs off, nothing about the visit is kept.
The app sets no cookies, does not identify visitors, does not read customer accounts or orders, and does not build profiles.
Why we process it
Only to provide the service the merchant configured: apply their rules and show them their activity charts. We do not sell or rent any data, and we do not use it for advertising.
Where it is stored and who processes it
The app and its database run on a server in Quebec, Canada, operated by OVHcloud. Requests travel through Shopify and Cloudflare, which carry them to our server. No other third party receives this data.
For visitor data, the merchant decides how the app is used and acts as the controller; Geoblok processes it on the merchant's behalf.
How long we keep it
- Visitor activity logs: 30 days.
- When a merchant uninstalls the app, its rules and activity logs are deleted right away. The remaining store data, including the contact email, is erased when Shopify sends its shop deletion request, about 48 hours later.
- Customer data requests and deletion requests sent by Shopify are answered as required. The app holds no customer records.
Your rights
You can ask to access, correct or delete the data we hold about you. Store visitors should first contact the store they visited, since the merchant controls the app on that store. Merchants and visitors can reach us through our contact page.
Changes
We will update this page when the app changes how it handles data, and change the date at the top.
IP geolocation by DB-IP.