Terms of service

Last updated September 30, 2026

These terms apply to merchants who install Mint Blocker ("the app"), made by Mint Labs ("we", "us"). By installing or using the app you agree to these terms and to our privacy policy.

The service

The app lets you block storefront visitors by country or IP address through a theme app extension (a block page or a redirect), adds a checkout rule to your Shopify store (paid plan, when you switch it on) powered by the app's Shopify Function that stops checkout for blocked countries, email addresses, domains and customer tags, and can check new orders against your lists, tag matching orders and, only if you turn it on, cancel them. We may improve or change features; we will not remove a paid feature you rely on without notice.

What blocking can and can't do

Storefront blocking runs in the visitor's browser and can be bypassed (for example by turning off JavaScript, a VPN, or a crawler's user agent); visitor locations come from IP geolocation and can be wrong. The checkout rule is enforced by Shopify but only knows what the buyer enters (addresses, email, account). The app doesn't detect fraud, bots, VPNs or proxies on its own and doesn't guarantee that any unwanted visitor or order is stopped. If our service is unavailable, visitors see your store as normal. You decide what to block, and you are responsible for complying with the laws that apply to you (including consumer protection and anti-discrimination rules) and for decisions about orders, including cancellations and refunds made automatically at your request.

Billing

Plans are billed by Shopify every 30 days in USD after the free trial. You can cancel at any time by changing plans or uninstalling the app. Charges are handled entirely by Shopify under Shopify's terms.

Availability and liability

We work to keep the app available, accurate and secure, but it is provided "as is". To the extent the law allows, our total liability is limited to the fees you paid for the app in the 3 months before a claim.

Data processing addendum

When the app processes personal data of your customers and storefront visitors on your behalf, you are the controller and we are the processor. We will:

  • process personal data only to provide the app's features, following your instructions given through the app's settings;
  • process only the minimum data needed: visitor IP addresses are used for the visitor check and not stored for allowed visitors; for blocked visits we store only the shortened network address and a keyed hash; order checks read the order's email and IP address and keep neither; we store email addresses only when you put them on your block list;
  • never sell personal data, use it for advertising, or use it to train AI models;
  • keep it confidential and limit access to authorised personnel;
  • encrypt it in transit (HTTPS) and at rest (Cloudflare D1 and KV encryption at rest);
  • use Cloudflare (hosting, database, edge storage) and Shopify as our only sub-processors;
  • delete blocked-visit records after 30 days and flagged-order records after 90 days, remove a customer's email from your block list and delete their flagged-order records when Shopify sends an erasure request, and delete all shop data after uninstall (shop redaction);
  • help you respond to data subject requests (the app lets you download what it holds about a customer) and notify you without undue delay of any personal data breach.

Changes

We will post changes to these terms here and update the date above. Significant changes will be announced in the app.

Contact

Mint Labs — support@stickermint.com