Understory Page Builder privacy policy

Last updated 7 September 2026

Understory Page Builder ("Understory", "the app") is a Shopify app that lets a merchant build content shown below their products. This policy explains what the app accesses, what it stores, and who it shares data with.

The short version

Understory stores no personal data, and stores nothing at all outside Shopify. It has no database. Every piece of content a merchant creates is written to their own Shopify store and stays there.

What the app accesses

When a merchant installs Understory, they grant it these permissions. It uses each one only for the purpose given.

• Products to list products in the picker, and to save content onto the product being edited.
• Files to let a merchant choose or upload images for their content.
• Markets to offer the shop's own markets when a merchant limits content to some of them.
• Themes to check whether the app's block has been added to the product template, so the app can say when saved content will not appear.

Understory does not request access to customers, orders, or any other personal data, and cannot read it.

Billing

Billing is handled entirely by Shopify, through Shopify App Pricing. The app never sees a payment method or any billing detail. It reads only which plan the shop is currently on, from Shopify, to show that plan in the interface and to apply the limits the plan describes. Nothing about billing is stored by the app or its operator.

What the app stores, and where

Content is written to metafields on the merchant's own Shopify store, in a namespace reserved to this app:

• pdp_builder_page on the product: the layout the merchant built.
• pdp_builder_html on the product: the markup the storefront prints.
• Block types the merchant defines, stored on the app installation.

That is the complete list. The app operator keeps no copy, and there is no server holding merchant content.

What runs on the storefront

Nothing. Understory renders content when the merchant saves and stores the result on the product. The merchant's theme prints that markup on the server. No script belonging to this app loads for shoppers, and the app collects no information about anyone visiting a storefront.

Data from shoppers

None is collected. Understory sets no cookies on a storefront, runs no tracking, and receives no shopper data of any kind.

Sharing

Merchant data is not sold, rented, or shared with third parties. The app's interface is served as static files by Cloudflare, which acts as a host and receives ordinary web server request logs. Those logs are not used to identify anyone and no merchant content passes through them.

Uninstalling, and erasure

Uninstalling removes the app's block from the storefront and the block types stored on the app installation. Content already saved on products belongs to the merchant and remains on their store, where they can delete it themselves. Because the app holds nothing elsewhere, there is no other copy to erase.

Understory answers Shopify's mandatory privacy webhooks (customers/data_request, customers/redact and shop/redact). Each is verified as genuinely from Shopify, and each is answered truthfully: there is no personal data held outside Shopify to return or erase.

Changes

Any change to this policy will be published on this page with a new date above.

Contact

Questions about this policy, or about data handling, can be sent to support.understory@gmail.com.