Security & privacy

Customer data

• Phone numbers are stored in E.164 format, encrypted at rest, and masked everywhere in the merchant admin.
• OTP codes are stored as SHA-256 hashes. The plaintext code is never written to the database.
• All messaging and API credentials are held server-side as environment variables. Nothing sensitive is exposed to the storefront.

Authentication

The embedded admin app authenticates every loader and action with Shopify session tokens through App Bridge. Storefront endpoints authenticate with Shopify's app-proxy HMAC, which means a request that did not originate from your storefront cannot reach them.

GDPR

CODGuard honours all three of Shopify's mandatory compliance webhooks:

• customers/data_request — export a customer's stored data.
• customers/redact — erase a customer's data.
• shop/redact — erase all data for a shop.

Uninstalling triggers cleanup of the shop's records.

Checkout integrity

CODGuard never modifies Shopify's checkout. Verification happens before the shopper reaches it, and the modal script loads asynchronously so it cannot block the page.

Rule enforcement uses Shopify's official Functions rather than script injection. The delivery customization is written so that a COD buyer always keeps the cheapest delivery option available to them, and any COD charge appears as a separate, clearly labelled choice.

Reporting an issue

Email support@codguard.in with the details. Security reports are prioritised ahead of the normal support queue.