Privacy Policy

Gone Fishing: Vacation Mode — Last updated: September 14, 2026

Gone Fishing: Vacation Mode is a Shopify app that lets a merchant close their store for a holiday or on a repeating weekly schedule. While the store is closed it shows a notice banner and blocks checkout, but leaves the storefront browsable so visitors can still look around. This policy explains what data this app touches and how it handles it.

What this app stores

Two things, and nothing else.

The merchant's own settings. The closure dates and times, the time zone they are read in, any weekly schedule, and the wording of the banner and the advance notice. These are stored as app-owned metafields on the merchant's own Shopify shop, and a copy of the parts needed to block checkout is stored on the checkout validation Shopify runs. These are business settings — opening hours and a sign in the window — not personal information about anybody.

A session for the merchant's store. Shopify's OAuth requires an installed app to hold a record identifying the store it is installed on: the shop's .myshopify.com domain and the access token Shopify issued for it. This is stored in this app's own database, on a server operated by Marquee Apps and hosted with DigitalOcean. It is what allows the app to read and write the settings above on the merchant's behalf, and it is used for nothing else.

That token is issued to the store rather than to a person, so no staff member's name, email address, or login is stored with it.

How stored data is protected

Encrypted at rest. In the app's database, the store's access token and refresh token are encrypted with AES-256-GCM before they are written, and decrypted only in memory when the app needs them. What is not encrypted: the shop's .myshopify.com domain, which the record is filed under; the permissions the token was granted; and when the token expires. The encryption key is kept outside the database, on the same server, readable only by the account the app runs as.

Encrypted in transit. Data travels between Shopify, the merchant's browser and this app over HTTPS (TLS) only. The database is a file on the app's server and is not reachable over the network.

Shopper information

This app does not collect, store, or process any personal information about shoppers. No names, email addresses, physical addresses, order contents, or payment details ever pass through it.

The banner a shopper sees is rendered by the merchant's own theme from the settings above; it does not report back that it was shown, and it does not identify who saw it. The check that blocks checkout runs inside Shopify and is given only two things: which step of the checkout the buyer has reached, and the current date and time in the shop's own time zone. It is not given the contents of the cart, and it is not given anything about the person holding it.

What this app does not do

• It does not use cookies, analytics, or tracking scripts of its own.
• It does not sell, rent, or share any data with third parties.
• It does not build a profile of shoppers, or keep any record of who visited a closed store.
• It does not access customer, order, or product data — the app requests no permission to read any of them.

Data retention

The settings are stored on the merchant's own shop, and stay there until the merchant changes them or the app is uninstalled, at which point Shopify removes the app's metafields with it.

The session record described above is deleted when the merchant uninstalls the app. This app subscribes to Shopify's app-uninstalled notification for exactly that reason, so an uninstalled store's access token is not left sitting in a database.

Data requests

This app subscribes to the three data-protection notifications Shopify requires of every app: a request for a customer's data, a request to erase a customer's data, and a request to erase a shop's data. Because the app holds no customer information, there is nothing to return or erase in response to the first two. A request to erase a shop's data removes that shop's session record.

A merchant who wants confirmation of what is held for their store, or who wants it removed, can write to the address below.

The merchant's own privacy policy

This page covers only what this app itself does. The store you are visiting has its own privacy policy covering how it collects and uses your personal information more broadly — that policy, not this one, governs your visit and any order you place.

Changes to this policy

If this policy changes, the updated version will be posted at this same address with a revised "Last updated" date above.

Contact

Questions about this policy or this app can be sent to Support@MarqueeApps.com.