Goldilocks: Size Charts

Privacy policy

Last updated 12 October 2026

Goldilocks: Size Charts ("Goldilocks", "we") is a Shopify app made by Crooked Cats Studio LLC, San Diego, California. This policy explains what the app reads from your store, what it keeps, and what it never touches. If anything here is unclear, write to hi@crookedcatsstudio.com.

What we read from your store

When you install Goldilocks, Shopify asks you to grant these permissions:

• Products. Titles, descriptions, images, types, tags, vendors and collections, so the app can find size information and attach the right chart to each product. The app writes one thing back: the size chart assigned to a product, stored as an app-owned metafield.
• Themes (read only). To check that the size guide block is on your product page and warn you if it isn't. The app never edits your theme.
• Pages and blog posts (read only). To find an existing size guide page and offer to turn it into charts.
• Store languages (read only). So translated charts match the languages your store is published in.

What we keep

• Your store's domain and the access token Shopify issues to the app, so it can work on your behalf.
• Your charts, drafts and the rules for where each one shows (product types, products, collections, tags, vendors).
• The text or image you gave the app when it drafted a chart, so you can compare the chart against its source.
• Your plan, trial dates and setup-run history.
• The name and email of the staff member who opened the app, which Shopify provides with each session. We don't email you from it.

This data lives on Cloudflare's infrastructure. Shopify's "Built for Shopify" requirements and Shopify's own terms also apply to how the app behaves inside your admin.

What we never collect

• No customer data. The size guide on your storefront runs in the shopper's browser and sends nothing back to us. We don't see who views a chart, what they choose, or anything about your orders.
• No order or sales data. Pricing never depends on your order volume, and the app doesn't read orders.
• No analytics scripts, cookies or trackers on your storefront.

Artificial intelligence

When you run auto-setup, translate a chart, or import from a screenshot, the app sends the relevant product text, page text or image to Anthropic's Claude API to extract or translate the table. Every number that comes back is checked against the source, and anything the check can't confirm is marked for your review. Anthropic processes this content under its commercial terms and does not use it to train models. We send only product and page content, never customer or order data.

Who else sees your data

• Shopify, which hosts your store and the app's billing.
• Cloudflare, which hosts the app and its database.
• Anthropic, for the AI features above, only when you use them.

We don't sell data, and we don't share it with anyone else.

Export and deletion

You can export every chart as CSV or JSON from the app at any time, on any plan. When you uninstall the app, we delete your access token and plan details straight away. Your charts are kept for 48 hours so they come back by themselves if you reinstall, then Shopify's store-deletion webhook erases everything we hold about your store. Charts stored in your store as app-owned metafields are removed by Shopify at uninstall. Customer data requests and deletions are answered automatically; since we hold no customer data, there is nothing to return or erase.

Security

All traffic uses HTTPS. Access tokens live in a database that our host encrypts at rest, are never shown in the app, and are sent nowhere except Shopify. Webhooks from Shopify are verified before they're processed.

Changes

If this policy changes in a way that matters, we'll show a notice inside the app. The date at the top always reflects the latest version.

Contact

Crooked Cats Studio LLC · hi@crookedcatsstudio.com