Privacy policy

Last updated: October 17, 2026

Thumby (“the App”) helps Shopify merchants create product thumbnails. This policy explains what information the App collects when you install it, how it is used and how it is protected. The App is operated by Yaroslav Solonnikov (OctoPeeps), referred to as “we” or “us”.

Information we collect

When you install the App, Shopify gives us access to certain data in your store. We access only what the App needs to work:

  • Store information: your shop domain and the access token Shopify issues for the App. We store them to make requests to your store on your behalf.
  • Staff account information: when you open the App, Shopify may include the name, email address and language of the staff member using it in the session.
  • Products and media: product titles, images and their status, read through the Shopify Admin API to show them in the editor. We do not store them on our servers.
  • Theme settings (optional): only if you click “Detect from theme” and grant access, the App reads your theme settings to find the product card aspect ratio. Nothing from your theme is stored.

The App does not access your customers’ personal information, orders or payment data.

Where your thumbnails are kept

Thumbnails you create are uploaded to the Files section of your Shopify store. Crop settings are saved as app metafields on your products. Both live in your store, not on our servers. A thumbnail image passes through our server only while it is being uploaded to Shopify and is not retained afterwards.

How we use information

  • To provide the App’s features and keep them working.
  • To keep thumbnails in sync when product photos change.
  • To respond to your support requests.
  • To detect and fix errors.

We do not sell your information or use it for advertising.

Sharing

We share information only with the service providers we need to run the App, such as our hosting provider, and only to the extent required. We may disclose information if the law requires it.

Data retention and deletion

When you uninstall the App, we delete your store’s session data. Shopify then sends us a data erasure request, and we delete any remaining information related to your store. Thumbnail files stay in your store’s Files, where you can delete them at any time.

Your rights

If you are in the European Economic Area, the United Kingdom or another region with data protection laws, you may have the right to access, correct or delete your personal information, and to object to its processing. To use these rights, write to us at octopeeps@gmail.com. We also handle data requests that Shopify forwards to us on behalf of merchants and their customers.

Security

Data is transferred over encrypted connections (HTTPS). Access tokens are stored on a secured server with restricted access.

Cookies

This website does not use tracking or advertising cookies. Inside Shopify admin, the App uses only the session tokens Shopify requires to sign you in. Videos on the Screencasts page are embedded from YouTube in privacy-enhanced mode and load only when you press play.

Changes to this policy

We may update this policy from time to time. The date at the top shows when it was last changed.

Contact

Questions about this policy or your data: octopeeps@gmail.com.