How we handle your data.

This policy explains what personal data the Muslin theme support site (www.muslin.online) collects, why, and what you can do about it. Scrudal publishes this site and is the controller of the data described below.

What we collect

When you send a support request

Your name and email address.
Your store address and the description of the problem.
Images you attach (screenshots). Please do not include customer data, passwords or payment details in screenshots.
A ticket number, the date and time of the request, and your IP address (used for abuse prevention and the request log).

When you only browse

We do not run analytics, advertising or tracking scripts. Our server keeps standard technical logs (IP address, requested page, date and time) for security and to keep the site running.

Why we use it

To answer your request and send you an automatic confirmation with your ticket number. This is needed to provide the support you ask for.
To protect the site from spam and abuse (rate limiting, request log). This is our legitimate interest in running a safe support service.
To improve the theme and its documentation by spotting problems that many merchants report. We use the content of requests only for this and never for marketing.

Who receives it

Our hosting and email providers, who process data on our behalf to run the site and deliver email.
Nobody else. We do not sell your data and we do not share it for advertising.

If a problem turns out to be caused by Shopify or by an app, you may be pointed to their own support channels. We will not pass your details on without asking you first.

Third-party resources

To display pages, your browser loads fonts from Google Fonts and the Tailwind CSS stylesheet from the Tailwind CDN. These providers receive your IP address and browser details when the files are requested. If you open the demo store, you leave this site and Shopify's privacy policy applies there.

How long we keep it

Support requests, including attached images: up to 24 months after the request is closed, then deleted.
Rate-limit records: up to 1 hour.
Server logs: up to 90 days.

Your rights

Depending on where you live, you can ask us to access, correct, export or delete your personal data, to restrict or object to how we use it, and to withdraw consent. If you are in the European Economic Area or the United Kingdom, you may also complain to your data protection authority. If you are in California, you have the right to know, delete and correct your data and not to be discriminated against for using these rights; we do not sell or share personal data. To use any of these rights, write to us through the support form and include your ticket number so we can find your data. We answer within 30 days.

Security

The site uses HTTPS. Uploaded images are checked, renamed and stored where they cannot be opened directly from the web. Access is limited to people who handle support. No system is perfectly secure, so please share only what is needed to explain the problem.

Children

This site is for merchants and developers. It is not directed to children under 16 and we do not knowingly collect their data.

Cookies

See the cookie notice.

Changes

If we change this policy in a meaningful way we will update the date at the top of this page.

Contact

Questions about this policy: write to us through the support form.