Drilly Mini Cart Drawer — Last updated: July 2026
Drilly Mini Cart Drawer ("the app") is a Shopify app that adds a slide-out cart drawer to a merchant's storefront. This policy explains what data the app collects, why, and how it's handled.
The app stores only shop-level display settings, saved as app-owned metafields on the Shopify Shop object:
The app also stores an OAuth session record (shop domain and access token) required to authenticate API requests to Shopify, in a database hosted on Railway.
The app does not collect, store, or process any customer personal information — no names, emails, addresses, phone numbers, or order contents. Cart contents shown in the drawer are read live from Shopify's Cart AJAX API on the customer's own browser and are never sent to or stored on our servers.
The shop-level settings are used solely to render the cart drawer with the merchant's chosen appearance. The OAuth session is used solely to authenticate requests to the Shopify Admin API on the merchant's behalf.
We do not sell, rent, or share any data with third parties. Data is only exchanged with Shopify's own APIs as required for the app to function.
Shop-level metafields and the OAuth session are deleted automatically when the merchant uninstalls the app, in compliance with Shopify's mandatory GDPR webhooks (customers/data_request, customers/redact, shop/redact).
Since no customer personal data is ever collected, there is no customer data to request or delete. Merchants may contact us at any time to request removal of their shop-level settings.
Questions about this policy can be sent to harshakunchala8@gmail.com.