Privacy notice — Shopify age verification

Privacy notice — EUDI Wallet Age Verification Proposed version: 2026-10-30-v1 1. Service and contacts The hosted service is operated by WEB3 DIGITAL WALLET, SAS, French company number 910 399 435, 112 rue des Tuileries, 28260 Saint-Ouen-Marchefroy, France. Contact: contact@talao.io. The merchant determines restricted products, purposes and the legal basis for its age checks. WEB3 DIGITAL WALLET processes journey data on its instructions. WEB3 DIGITAL WALLET has separate purposes for service administration and security. Shopify and the wallet provider have their own processing activities and notices. 2. Verification and customer choices The customer must sign in to their Shopify account. The wallet is asked only for the “18 or over” result, not a name, date of birth or identity-document copy. The Hub verifies the presentation and the OIDC bridge delivers the result to the connector. Authorization is linked to the customer account until the end of the store day. This does not establish that the wallet holder legally owns the Shopify account. Customers may decline the presentation. No new authorization is then granted; an earlier valid authorization is not automatically revoked. Without authorization, checkout stays blocked for restricted products. Unrestricted products do not require this proof. If the merchant enables manual review, customers may request a review without a wallet or challenge the result. The merchant performs checks and responds; WEB3 DIGITAL WALLET supplies the form and tracking, not the examination on the merchant’s behalf. A request alone grants no access, and approval is not guaranteed. Merchant approval creates a daily authorization, not a cryptographic wallet proof. 3. Data and purposes The connector processes store domain and ID, settings, Shopify customer ID, temporary browser/OIDC bindings, the 18+ result and validity date. OIDC secrets and Shopify tokens remain server-side. Rights requests received from Shopify may contain additional information in their payload. Manual cases contain customer ID, optional explanation, status, response, dates and merchant-session type. Do not submit identity documents, payment details or wallet secrets; the merchant arranges appropriate checks separately. Document acceptance, when enabled, records the store, version, exact texts, digest, language, date and session type. It does not collect the signatory’s name or IP address or independently verify their authority. The bridge uses temporary protocol data and anti-abuse counters. Its OIDC client registry and verified developer contacts are separate from the buyer journey. The age profile creates no persistent buyer identity. Data is not sold or reused for advertising or AI training. The merchant determines and explains the legal basis for its purposes; voluntary wallet sharing does not automatically establish a basis for every processing activity. For its own service administration and abuse prevention, WEB3 DIGITAL WALLET relies on the service relationship and legitimate security interests, subject to individuals’ rights. Applicable legal obligations may also require processing. 4. Access and hosting Merchants access their own store’s cases; authorized operators may intervene for service, security and rights requests. WEB3 DIGITAL WALLET operates the connector, bridge and Hub on AWS Paris (eu-west-3). AWS supplies hosting; no other recipient service provider is planned for this journey apart from Shopify. AWS terms and its data processing agreement govern possible access and transfers; French hosting does not by itself exclude all transfers outside the EEA. Exchanges use HTTPS; connector payloads and connector backups are encrypted. These measures do not mean all data independently handled by Shopify or the wallet belongs to our storage. 5. Retention Ordinary connector transactions generally expire after five minutes; manual-review browser context lasts thirty minutes. Hourly maintenance removes expired temporary data. Shopify authorization expires at the end of the local store day; an hourly task replaces expired content with an empty object without deleting the account or associated field. Manual cases remain until handled, then are cleaned seven days after the decision. Rights requests remain until fulfilled; their payload is cleaned thirty days after recorded completion. Dedicated Hub history for new Shopify checks is cleaned seven days after the latest creation, expiry and completion date. Daily connector backups have seven-day retention. Missed or failed runs may delay cleanup and require intervention. These tasks do not automatically cover old shared history, working copies or other components’ backups. The OIDC registry and administrative audit log have no automatic purge: necessity and erasure requests are assessed separately when the relevant service or client closes. Technical logs and historical data have a separate operational review; application cleanup does not guarantee seven-day retention of every copy. The installation and its acceptance receipts are deleted when the app receives the uninstall or shop-erasure webhook; copies follow the backup cycle. Uninstalling does not itself erase all independent Shopify records. 6. Your rights Contact your merchant for processing it determines, or contact@talao.io for routing and WEB3 DIGITAL WALLET’s own processing. Depending on the legal basis and applicable conditions, rights include access, rectification, erasure, restriction, objection, portability and withdrawal of consent. Requester checks are limited to necessary information. Withdrawal does not invalidate earlier lawful processing or guarantee access to restricted products. Thierry Thevenet monitors contact@talao.io each business day; receipt is acknowledged within two business days, separately from completion. Exports are encrypted and passwords sent through a separate channel. You may contact the competent supervisory authority, including France’s CNIL (https://www.cnil.fr/fr/plaintes).