On November 9, 2026, we published "Our approach to security", a page that summarizes the security measures in place across the seven RuffRuff apps.
Key points
- It covers how we handle customer data, how we protect access tokens, the checks we run on each update, and how we manage the production environment.
- You can open this page at any time from the footer on ruffruff.app.
- App behavior does not change. No setting changes or reinstallation are required.
Apps covered
- RuffRuff 予約販売
- RuffRuff Order Limits
- RuffRuff Order Bonus
- RuffRuff Selling Periods
- RuffRuff Table of Contents
- RuffRuff Product & Blog Tags
- RuffRuff Author Profiles
What the page covers
These are the headings on the page and the main point of each. See the page for the full explanation.
- We do not keep customers' personal information: We do not store customers' personal information, such as names and addresses, or payment information, such as credit card numbers, on Tsun's servers.
- We access only the data we need: App permissions are limited to what each feature needs. RuffRuff Table of Contents and RuffRuff Product & Blog Tags can only read pages and themes.
- Access tokens expire after one hour: The access tokens used to read and write store data stop working after one hour and are replaced with new ones automatically.
- Access tokens work only from Tsun's servers: We use Shopify's IP allowlist so that they cannot be used from anywhere else.
- We store app settings inside the store: We do not keep a copy of the settings on Tsun's servers.
- Settings that control app behavior can be changed only by that app: We store them in Shopify app-owned metafields that only that app can write to.
- We check security on every update: Each time we change the code, we run Shopify's official security check. We also run periodic AI security reviews.
- When a vulnerability is disclosed, we check the impact and report it: We publish a notice even when our apps are not affected.
- We delete data for stores that uninstall: We delete it from the app database. When a customer's data deletion is requested, RuffRuff Order Limits automatically deletes the cumulative purchase data stored in customer metafields.
- We limit who can access the production environment and for how long: Approved staff can operate it only for a set time, using a dedicated administrator account. We do not give production login credentials to the AI tools we use internally.
Action for store owners
This update only publishes the page, and app behavior does not change. No setting changes or app reinstallation are required.
