Privacy policy

Last updated October 2, 2026

Tagpass is a Shopify app made by DCODED. It lets Shopify merchants give their customers membership cards in Apple Wallet and Google Wallet. This policy explains what data Tagpass handles, why, and how long it is kept.

Data we collect from merchants

• Your shop domain and store name, and the access token Shopify issues when you install the app.
• Card settings: program name, member tag, colors, layout, QR code setting, and any logo or icon you upload.
• Your store's brand logo and colors from Shopify's brand settings, if you choose to use them.
• Feedback you choose to send from the app, with your store name and contact email.

Data we collect about your customers

Only for customers who carry your member tag, Tagpass stores:

• Their Shopify customer ID and first and last name.
• A generated member ID, the date they became a member, and whether the card is active.
• Values of customer metafields you choose to show on the card.
• When a card is saved to Apple Wallet: a device identifier and push token from Apple, used only to send card updates to that device.

Tagpass does not read or store customer email addresses, phone numbers, addresses, orders or payment details.

How the data is used

Only to create, display and update membership cards, to let your staff check whether a membership is active, and to show you member counts in the app. We do not sell data, use it for advertising, or share it with anyone except the services below.

Services that process data

• Shopify, where the data comes from.
• Fly.io, which hosts the app and its database in the United States.
• Apple (Apple Wallet) and Google (Google Wallet), which receive the card contents so members can save and update their cards.
• Resend, which delivers the feedback emails you send us.

This website

tagpass.dcoded.dev uses Google Analytics to count visits and see which pages are useful. It sets cookies and receives your IP address and browser details. We don't combine this with app data. You can block it with any tracker blocker or Google's opt-out add-on. The Tagpass app inside Shopify and the member card pages don't use analytics.

Retention and deletion

• Removing a customer's member tag marks their card inactive.
• When Shopify asks us to delete a customer's data, we delete their card and its data.
• When you uninstall Tagpass, Shopify asks us to delete your shop's data after 48 hours, and we delete all of it then.
• Ask us at the address below and we'll delete your feedback messages sooner.

Your customers' rights

Customers can ask you, the merchant, to access or delete their data. Shopify forwards those requests to Tagpass and we handle them automatically. Customers can also remove the card from their wallet at any time.

Security

Data is sent over HTTPS. Card and staff check links are signed so they can't be guessed. Signing keys and credentials are kept as encrypted secrets, separate from the code.

Contact

Questions about privacy: tagpass@dcoded.dev.