Privacy Policy

WYS by lalo-app · Last updated: October 15, 2026

In short: WYS reads your products and stock to show size charts with live availability. Your size charts are stored in your own Shopify store. WYS does not access your customers and never changes your products, prices or stock.

1. Who we are and our role

WYS (“What's Your Size”) is a Shopify app made by lalo-app (“we”, “us”). For data about your store that the app processes on your behalf, you, the merchant, are the controller and we act as your processor. Contact: support@lalo-app.com.

2. What the app accesses

Read products (read_products): titles, vendors, types, tags, collections, options and variants, to decide which chart a product gets and to match variants to chart rows.
Read inventory (read_inventory): stock quantities and whether a variant can be sold without stock, to show availability in each row.
Its own records in your store (write_metaobjects, write_metaobject_definitions): your size charts are saved as metaobjects in your store; which product uses which chart and your manual choices are saved in app-owned metafields.

WYS does not access customer records, orders, checkouts, payment information or staff accounts. The size chart on your storefront is rendered by your theme from data in your store.

Storefront counts. To show you how shoppers use your charts, the storefront script counts four actions per chart and page: the chart was opened, “find my size” found a size, a size was chosen from the chart, and the product was added to the cart after that. When the visitor leaves the page, these numbers are sent once, through Shopify's app proxy, to our server, which adds them to daily totals per chart. Nothing is sent if the visitor has not given consent through your store's cookie banner (Shopify Customer Privacy), and nothing is sent from the theme editor. No cookies, visitor identifiers, customer accounts or product lists are sent or stored. The request may carry the visitor's IP address; we use it only in memory, for about a minute, to limit abuse, and do not store or log it.

3. Where data is kept

In your Shopify store: size charts, rules, display settings, manual mappings and preferences. They stay in your store (Content → Metaobjects) even after you uninstall WYS.
On our server: the store identifier and the access token issued by Shopify (encrypted); the latest watchdog report: which of your products have no chart or sizes that match no row; the daily storefront totals per chart (numbers only, see section 2); service records about your store: when the app was installed and removed, plan changes, and the first steps you took in the app (for example the first size chart and its first view on your storefront) — to understand how WYS is used; the store domain only, nothing about your products or customers; short-lived technical records: Shopify webhook IDs for 48 hours (so the same event is not processed twice) and the queue of background work until it is done; error messages are kept in memory only, with tokens, signatures and email addresses removed. Your catalog is read into memory while the watchdog runs and is not stored.

Hosting: our server is in France (European Union), operated for us by Contabo GmbH. All connections are encrypted (HTTPS); access to the server is limited to us and protected by key-based login and a firewall.

4. Shared anonymous statistics

To make WYS better at recognizing sizes for every store, WYS can count how stores describe sizes. The option is called “Help improve WYS”. It is on by default, and you can switch it off at any time on the app's home screen.

What is counted: short, normalized words only. Which option names mean size (for example “taille”), the type of your chart columns (for example “stack: number, mm”), and how variant values were matched to rows by hand (for example “taille xxl → XXL”).
What is never included: products, product titles, prices, stock, sales, customers, and any identifier of your store.
Counted once: while sharing is on, each store counts each item once; a change moves the count instead of adding to it. For this our server keeps a record keyed by a salted one-way hash of the store, never its name.
Minimum of five stores: a count influences the app only after the same item came from at least five different stores, so a single store's choices cannot be seen through it.
Switching it off or uninstalling the app stops sending anything new and unlinks your store: the record that tied your store to its items is deleted, so no one, including us, can tell what your store contributed. Items already counted stay in the totals, as anonymous counts. Stores not seen for 180 days are unlinked the same way.

These counts do not relate to an identified or identifiable person and are not personal data. We collect them on the basis of our legitimate interest in improving the service; you can object by switching the option off.

5. Who else sees the data

Shopify hosts your store and processes billing.
Contabo GmbH provides the server infrastructure and does not use the data for its own purposes.
Email: messages to support@lalo-app.com pass through Cloudflare Email Routing to our mailbox and are used only to answer you.

We do not sell your data, do not use it for advertising and do not share it with anyone else.

6. How long we keep it

Storefront totals are kept for 400 days, then deleted.
When you uninstall WYS, the access token is deleted right away and your store is unlinked from the shared counts.
When Shopify sends a data erasure request for your store (48 hours after uninstall), the watchdog report, the storefront totals and anything else the app kept about your store and pending background work are erased; the service records stay only without your store domain (replaced by an irreversible code), so they can no longer be linked to your store.
Nightly copies of the database are kept for 7 days, so erased data leaves the copies within a week.
Shared counts contain nothing that identifies your store and, once your store is unlinked, cannot be traced back to it, so they are kept.

7. Your customers

WYS holds no personal data about your customers or storefront visitors: storefront counts are totals per chart and day, not linked to any person. If Shopify sends us a customer data request or a customer erasure request, there is nothing about that person to return or erase.

8. Changes and contact

If we change this policy, we update the date above. Questions: support@lalo-app.com.