Ringmatch — Privacy Policy

Last updated 23 August 2026

The short version

Ringmatch collects nothing. There is no analytics, no tracking, and no personal data of any kind. Nothing a shopper measures leaves their own browser.

What the app does

Ringmatch adds a block to a merchant’s product page that helps a shopper work out their ring size. The shopper matches a bank card against an outline on their screen to establish the scale, then measures a ring they own or a strip of paper. All of that arithmetic happens in the browser, in JavaScript. No measurement is transmitted anywhere.

What is stored, and where

One value is saved: the screen calibration, so a returning shopper does not have to hold a card up twice. It is written to that browser’s own localStorage under the key ringsizer.cal.v2, on the merchant’s own domain. It holds a pixels-per-millimetre number and a fingerprint used to detect a zoom change. It is not readable by us, is never sent to a server, and clearing site data removes it.

On the merchant’s side, the app stores a Shopify OAuth session so the admin page can be opened. That is the only record it keeps, and it holds no shop or customer data.

Access to the store

The app requests no Admin API access scopes. It cannot read products, customers, or orders, because it never asks for permission to. Variant and stock information reaches the widget because the merchant’s own theme renders it into the page in Liquid, the same way it renders it for any visitor.

Third parties

None. The widget makes no third-party requests. The QR code shown under “continue on your phone” is generated in the browser rather than by a barcode service, specifically so that a shopper’s page address is not sent to anyone.

GDPR and data requests

The app implements Shopify’s mandatory privacy webhooks (customers/data_request, customers/redact, shop/redact) and verifies their HMAC signatures. Because no customer data is ever collected, there is nothing to return in response to a data request and nothing to erase in response to an erasure request. A shop/redact deletes the stored OAuth session for that shop.

Contact

Questions about this policy, or about privacy generally: tompeirs@gmail.com.