Last updated: August 29, 2026
Manca: EPR Compliance ("the App") is developed and maintained by Valerio Manca. This policy explains what data the App accesses, how it is used, and how it is stored.
The App reads your Shopify order history through the Shopify Admin API. For each order, we access only two fields:
We do not access customer names, email addresses, phone numbers, street addresses, zip codes, payment information, or any other personally identifiable information (PII).
The country code and order date are used exclusively to determine in which EU countries you may have Extended Producer Responsibility (EPR) obligations based on your shipping history. The App aggregates this data by country (total shipments, first and last shipment date) and computes a compliance status per country.
We store only aggregated results per country in our database: country code, shipment count, first and last shipment dates, and the computed compliance status. No individual order data, no customer data, and no PII are stored.
The database is hosted on Render in Frankfurt, Germany (EU).
We do not sell, share, or transfer your data to any third parties. The aggregated results are visible only to you within your Shopify admin.
Aggregated scan results are retained as long as the App is installed. When you uninstall the App, all stored data associated with your shop is permanently deleted.
You can request deletion of your data at any time by contacting us at the email address below.
The App handles Shopify's mandatory GDPR webhooks (customers/data_request, customers/redact, shop/redact). Since we do not store any personal customer data, no customer-level data exists to export or delete. Shop-level aggregated data is deleted upon receiving a shop/redact webhook.
For any questions about this privacy policy or your data, contact:
Valerio Manca — mancavalerio1@gmail.com