Privacy Policy
Sign in with Google for Ecwid · Effective June 10, 2026
This policy explains what information the “Sign in with Google” app (“the App”, “we”) collects when it is installed on an Ecwid (Lightspeed) store, why we collect it, and the choices you have. The App lets shoppers sign in to a merchant's storefront using their Google account.
Information we collect
When a shopper signs in with Google, we receive and store only:
- Email address — used to match or create the shopper's customer account in the merchant's store.
- Google account identifier (the Google “sub”) — a stable, opaque ID used to recognize the returning shopper.
- Ecwid customer ID — the ID of the linked customer record in the merchant's store.
- Sign-in timestamps — when the identity was created and last used.
We do not collect or store shopper names, addresses, payment details, order contents, passwords, or Google profile data beyond the email and account identifier above.
To operate, the App also stores the merchant's store ID and Ecwid access token (encrypted at rest) and the merchant's app settings.
How we use the information
- Authenticate shoppers and sign them in to the merchant's storefront.
- Recognize returning shoppers and keep them signed in across visits.
- Link a Google sign-in to an existing store account with the same email, when the shopper consents.
We do not sell shopper or merchant data, and we do not use it for advertising or for any purpose unrelated to providing the App.
How information is shared
The App relies on these service providers to function:
- Google — performs the sign-in. Your use of Google sign-in is subject to Google's Privacy Policy.
- Ecwid / Lightspeed — the e-commerce platform where the merchant's store and customer accounts live.
- Hosting & database providers — used to run the App and store the data described above.
Data security
All traffic is served over HTTPS. Access tokens and other secrets are encrypted at rest, and sign-in handles are stored only as salted hashes. Access to stored data is limited to operating the App.
Data retention
Shopper identity records are retained while the App is installed and the shopper account remains active. When a merchant uninstalls the App, it is deactivated and stops processing data; stored data is removed on request (see below).
Your rights & how to request deletion
Shoppers and merchants can request access to, or deletion of, the data described in this policy. To make a request, email us and include the store and the email address involved:
We action verified deletion requests promptly. Note that removing data from the merchant's store itself (customer records, orders) is managed by the merchant in Ecwid.
Changes to this policy
We may update this policy from time to time. Material changes will be reflected by a new effective date at the top of this page.
Contact
Questions about this policy or your data? Reach us at benjiferg@gmail.com — see also our About & Support page.