MerchantCue Privacy Policy

Effective date: November 12, 2026

This Privacy Policy describes how MerchantCue (“MerchantCue,” “we,” or “us”) handles information when you visit merchantcue.app, sign in, use the store directory, or contact us.

Information we collect and how we use it

Google sign-in. MerchantCue uses Google to sign you in or create your account. We request basic identity information through Google OpenID Connect. We use your Google account identifier, verified email address, and display name to identify your account, create your personal workspace, and maintain your sign-in. We check that Google has verified the email address. Google may return other basic profile fields, but MerchantCue does not use or retain them. We use the Google access token to fetch your profile during sign-in and do not store that token in our account database. We do not ask for your Google password or access to Gmail, Drive, or Contacts.

Account and browser data. We store your account identifier, Google identity identifier, email, display name, account creation time, and personal workspace records in Cloudflare D1. We use a short-lived cookie to complete Google sign-in and a session cookie to keep you signed in for up to seven days. The database stores a hash of the session token and its expiration time. Signing out clears the session cookie and removes that session from the database. Saved searches, your display name, and your email preferences can be stored in D1 so you can use them across devices. Browser storage keeps your export history and may contain older saved searches and settings. Clearing MerchantCue's site data removes records stored in that browser. CSV files you download remain on your device until you remove them.

Store searches and directory data. We receive the search terms and filters you submit so we can return matching stores. The directory contains information about third-party storefronts, such as store names, domains, countries, and associated ecommerce apps. We use this information to provide the searchable directory and related exports. Directory records are separate from information obtained through Google sign-in. If you believe a listing contains inaccurate information or personal data that should be removed, contact us with the store domain and the relevant listing details.

Support and delivery. If you contact us, we use the contact information and message you provide to respond and handle the request. Cloudflare processes web requests to deliver and protect the service. This can include IP addresses and request metadata. Google separately processes information when you use its sign-in service under its own Privacy Policy.

How information is shared

Cloudflare provides hosting and database services used to run MerchantCue. Google processes authentication requests, and MerchantCue uses the resulting basic profile information to operate your account. We do not sell Google account information, add it to the store directory, or use it for advertising. We may disclose information when legally required or where necessary to respond to a security incident or protect the rights or safety of users.

Retention and your choices

We retain your account and personal workspace records while your account remains open. The session expires after up to seven days. Expiration ends access through that session, and signing out removes the corresponding session record. Browser-stored data remains on the device until it is cleared.

To request access, correction, or deletion of your account information, or to raise a privacy concern, contact support@MerchantCue.app. We may verify your identity before acting on a request. When we close an account in response to a verified deletion request, we remove the associated account and session data from the active service, subject to applicable legal or security retention requirements. You can also revoke MerchantCue's access in your Google Account connections. Revoking Google access and deleting your MerchantCue account are separate actions.

If we materially change how we use Google account information, we will update this policy and provide notice before applying the change to that information.