Last updated: June 22, 2026
This privacy policy describes how MotionBanner (“we”, “us”) handles personal and shop-related data when you: • install or use the MotionBanner Shopify app; • visit a Shopify storefront where MotionBanner is enabled; or • browse our website at get.motionbanner.westlab.io. MotionBanner is operated by WestLab Marcel Heuser (Einzelunternehmen), Koblenzerstraße 29, 57610 Altenkirchen, Germany.
When a merchant installs MotionBanner, we receive and store data needed to operate the app, including: • Shopify shop domain and app installation details; • OAuth session data provided by Shopify (such as access tokens required to call Shopify APIs on your behalf); • optional staff account details supplied by Shopify during admin login (for example name, email address, locale, and user ID), where available; • banner configurations you create in the app (text, styling, scheduling, targeting, and publish status); • technical logs related to app operation (for example errors, webhook delivery, and request metadata). We do not ask merchants to submit their customers’ personal data in the app admin.
MotionBanner requests the following API access scopes: read_themes and write_app_proxy. We use Shopify APIs to: • check whether the MotionBanner theme app embed is enabled; • publish banner configuration to a shop metafield (published_banners) so the storefront can load settings; • authenticate your shop session and keep the app connected. We do not request access to orders, customers, products, payments, or other protected customer data scopes.
MotionBanner displays announcement bars on a merchant’s storefront through a Shopify Theme App Extension and an app proxy endpoint. For store visitors, MotionBanner does not intentionally collect, store, or sell personal customer information such as names, email addresses, phone numbers, or order details. When a storefront loads banner configuration, our servers may process technical request data (such as shop identifier, requested URL, IP address, browser user agent, and timestamps) in standard server logs for security and operations. We do not use this data to profile individual shoppers or for advertising. MotionBanner does not place marketing or analytics cookies on store visitors’ devices.
Our marketing website at get.motionbanner.westlab.io uses Google Analytics (Google LLC) to understand how visitors use the site. Google Analytics may set cookies and collect usage data such as pages visited, approximate location, device/browser information, and referrer. We use this only to improve the website. See Google’s privacy policy: https://policies.google.com/privacy We do not use advertising trackers or contact forms on this website. We store your language preference locally in your browser (localStorage key: motionbanner-locale). Our hosting provider (Railway) may process standard server logs, which can include IP address, browser type, requested URL, and timestamp.
We use collected data only to: • provide, maintain, and secure the MotionBanner app and website; • save, publish, and display banner configurations chosen by merchants; • respond to support requests and troubleshoot issues; • comply with legal obligations and Shopify platform requirements. We do not sell personal data. We do not use merchant or customer data for unrelated advertising.
Where the GDPR applies, we process personal data on the following bases: • Contract — to provide the app and related services you request; • Legitimate interests — to secure, operate, and improve MotionBanner; • Legal obligation — to comply with applicable laws and Shopify compliance requirements; • Consent — where required (for example optional communication you initiate with us).
We retain merchant app data for as long as your shop keeps MotionBanner installed and as needed to provide the service. When the app is uninstalled, we delete associated shop session and banner data through our uninstall and Shopify compliance webhooks (including shop/redact). For customer data requests and customer redaction webhooks, we acknowledge requests and confirm that MotionBanner does not store end-customer personal data requiring deletion. Server logs are retained only as long as necessary for security and operations, then deleted or anonymized.
We use trusted service providers to run MotionBanner, including: • Shopify — app platform, authentication, APIs, theme extension delivery, and webhooks; • Railway — application hosting and PostgreSQL database infrastructure; • Google Analytics — website usage statistics on get.motionbanner.westlab.io. Data may be processed in countries outside your own (including the United States). Where required, we rely on appropriate safeguards such as Standard Contractual Clauses and vendor contractual protections.
Depending on your location, you may have rights to access, correct, delete, restrict, or object to certain processing of your personal data, and to data portability. Merchants can uninstall the app to stop further collection and trigger deletion of app-held shop data. You may also contact us to exercise your rights.
For privacy questions or requests: WestLab Marcel Heuser Koblenzerstraße 29 57610 Altenkirchen Germany Email: support@westlab.io Website: https://westlab.io
