Shopper privacy
Shoesy AI runs as part of your storefront, so anything it stores in a shopper's browser is governed by your store's existing cookie / privacy banner. We do not maintain a separate Shoesy consent UI — that would be a third banner on top of yours and Shopify's, and you already own the legal surface that covers your domain.
What we keep on the shopper's device
Two small values live in the shopper's localStorage, scoped to your storefront origin. They never leave that device until the shopper sends another chat message, and they exist only to make follow-up answers feel continuous.
| Key | What's in it | How long |
|---|---|---|
_shoesy.size |
The size + brand the engine used most recently (e.g. US 10.5, Nike). |
30 days |
_shoesy.recent_order |
The order number + email from the shopper's most recent successful order-status lookup. | 3 days |
Both entries are stamped with a timestamp, and the widget drops them on read once the TTL has passed.
Three more entries live in sessionStorage, which is per-tab and evaporates when the tab closes:
| Key | What's in it | How long |
|---|---|---|
_shoesy.convo.<shop> |
The open conversation's id and up to its last 40 messages, so a page navigation doesn't blank the panel. | Until the tab closes |
__shoesy_feedback_votes__ |
Which replies got a thumbs up / down in this tab (message ids only). | Until the tab closes |
__shoesy_session_id__ |
A random per-tab id so reloads keep the same rate-limit bucket. No personal data. | Until the tab closes |
What we do not keep on the shopper's device
- No identifiers shared across stores. Each storefront origin has its own copy — local and session storage are both partitioned by domain.
- No payment details, and nothing that outlives the visit beyond the two
localStoragevalues above — the per-tab transcript cache is gone when the tab closes. Full conversation history lives server-side, scoped to your shop, under the data-handling commitments of our Privacy Policy. - No third-party analytics SDKs. We do not load Google Analytics, Meta Pixel, or similar trackers from the widget.
What reaches Shoesy servers
When the shopper asks a follow-up question, the widget attaches the surviving cache values to the chat-message request so the server can resolve "what about in this Adidas?" without re-asking for a size, or "and when will it arrive?" without re-pasting the order number. The server treats those values as a hint, not as authoritative input:
- Size hints are passed to the deterministic sizing engine as a pivot reference. The engine still consults your brand profiles + product variants; a tampered size produces at most one wrong answer, never persisted.
- Order hints are still re-resolved through Shopify's Admin API on every turn — Shopify's identity-bind (the order number and email must match the same row) is the trust anchor.
Plaintext order numbers and email addresses are scrubbed from our internal logging surface (ai_logs) regardless of whether they came from the message body or from this client-side cache.
How a shopper clears the cache
There is no in-widget "Forget me" button in the current version. A shopper can clear both entries any time via their browser:
- Chrome / Edge: DevTools (F12) → Application → Storage → Local Storage → your storefront domain → delete entries starting with
_shoesy.. - Safari: Preferences → Privacy → Manage Website Data → search your storefront domain → Remove.
- Firefox: DevTools (F12) → Storage → Local Storage → your storefront domain → delete entries starting with
_shoesy..
Clearing all site data for your storefront origin (e.g. via the lock icon → "Cookies and site data") also removes both entries along with everything else Shopify and your theme keep there. The sessionStorage entries (transcript cache, feedback marks, tab id) clear themselves the moment the tab closes.
How this surfaces in your privacy policy
If your privacy policy already mentions cookies, localStorage, and sessionStorage used for storefront functionality, you do not need to add a dedicated Shoesy clause — these entries fall within that scope.
If you want to call them out explicitly, the following copy is safe to drop in:
The AI Assistant on this storefront remembers the size you most recently asked about (for up to 30 days) and the order number you most recently looked up (for up to 3 days) in your browser's local storage on this storefront's domain. Those two values never leave your device until you ask another question, and you can clear them any time via your browser's site-data tools. Messages you send in the chat go to the store's AI service to be answered; your browser tab also keeps the open conversation in session storage so it survives page navigation, and drops it when the tab closes.
If you have any questions, email support@shoesy.ai.