The data underneath
has to be handled properly.
CODGuard sits between your customers and your courier, and it holds phone numbers to do it. Here is precisely what happens to them.
- Phone numbers
- Stored in E.164, encrypted at rest, and masked everywhere in the merchant admin.
- OTP codes
- Stored only as SHA-256 hashes. The plaintext code is never written to the database, and every code expires after ten minutes.
- Credentials
- All messaging and API keys live server-side as environment variables. Nothing sensitive is exposed to the storefront.
- Admin authentication
- Every loader and action authenticates with Shopify session tokens through App Bridge.
- Storefront authentication
- App-proxy HMAC. A request that did not originate from your storefront cannot reach the endpoints.
- Data erasure
- All three mandatory Shopify compliance webhooks are implemented, with cleanup on uninstall.
Customer data
- Phone numbers are stored in E.164 format, encrypted at rest, and masked everywhere in the merchant admin.
- OTP codes are stored as SHA-256 hashes. The plaintext code is never written to the database.
- All messaging and API credentials are held server-side as environment variables. Nothing sensitive is exposed to the storefront.
Authentication
The embedded admin app authenticates every loader and action with Shopify session tokens through App Bridge. Storefront endpoints authenticate with Shopify's app-proxy HMAC, which means a request that did not originate from your storefront cannot reach them.
GDPR
CODGuard honours all three of Shopify's mandatory compliance webhooks:
customers/data_request— export a customer's stored data.customers/redact— erase a customer's data.shop/redact— erase all data for a shop.
Uninstalling triggers cleanup of the shop's records.
Checkout integrity
CODGuard never modifies Shopify's checkout. Verification happens before the shopper reaches it, and the modal script loads asynchronously so it cannot block the page.
Rule enforcement uses Shopify's official Functions rather than script injection. The delivery customization is written so that a COD buyer always keeps the cheapest delivery option available to them, and any COD charge appears as a separate, clearly labelled choice.
Reporting an issue
Email support@codguard.in with the details. Security reports are prioritised ahead of the normal support queue.