UnpaintPrivacy policy
Unpaint: Play for a Discount (Shopify app) · last updated 19 October 2026
Unpaint is a small pixel-art puzzle game merchants add to their Shopify store: shoppers clear a picture to unlock a discount code. This page explains what the app stores, why, and for how long. The app is run by Comcode (Slovenia, EU).
What we store about stores (merchants)
| Data | Why | How long |
|---|---|---|
| Store domain, name, contact email, currency | To run the app for your store and send you leaderboard results | Until 48 hours after you uninstall (Shopify's shop/redact) |
| Access token from Shopify | To create discount codes and update the game's settings in your theme | Removed at uninstall |
| Game settings and your own pictures | To show your game | Kept for a reinstall until shop/redact |
| Support messages you send us | To answer you | As long as needed to help you |
What we store about shoppers
| Data | Why | How long |
|---|---|---|
| Won codes with the game result (stars, taps) and a salted hash of the IP address | To prevent abuse (one code per game, rate limits). The IP address itself is never stored. | Until the store's data is deleted |
| Leaderboard entries (Pro): a random player id created in the shopper's browser, the result, an optional nickname | To show the leaderboard and pick winners | Until the store's data is deleted |
| Email address and consent choices, only if the shopper enters them on a leaderboard | So the store can tell the shopper about a prize; a separate, optional box lets the shopper ask for the store's news | Deleted 30 days after the leaderboard period ends, or earlier on request |
The game keeps a few values in the shopper's browser (localStorage): the won code, the random player id, the nickname and email the shopper typed (so they don't have to type them again), and which prizes were shown.
We never email shoppers, never sell or share their data, and use no advertising or tracking cookies. When a leaderboard period ends, the store's owner receives the winners (nickname, result, email if given) and contacts them; the store is the organiser of its promotion.
Requests about personal data
Shopify forwards shoppers' data requests to us: for a data request we email the store owner what we hold for that email address; for a redaction we delete the email, consent and nickname. Shoppers can also ask the store directly, or write to us.
Where the data is
Google Cloud (App Engine and Datastore, EU and US regions) hosts the app; Cloudflare serves its domain. Support messages and merchant emails go through our own support system. Shopify hosts the discount codes in your store.
Contact
Questions or requests: [email protected].