From 938387407f9a20ff4e5c119d7dc00a3451a4a5f2 Mon Sep 17 00:00:00 2001
From: metatroncubeswdev <info@metatroncubesolutions.com>
Date: Tue, 13 Oct 2026 21:37:19 -0400
Subject: [PATCH] Add write_app_proxy scope, proxy path_prefix support, public
 privacy policy page

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
---
 app/routes/privacy.tsx | 35 +++++++++++++++++++++++++++++++++++
 1 file changed, 35 insertions(+)
 create mode 100644 app/routes/privacy.tsx

diff --git a/app/routes/privacy.tsx b/app/routes/privacy.tsx
new file mode 100644
index 0000000..9229f16
--- /dev/null
+++ b/app/routes/privacy.tsx
@@ -0,0 +1,35 @@
+// Public privacy policy (required for the App Store listing): https://<app domain>/privacy
+import type { MetaFunction } from "react-router";
+
+export const meta: MetaFunction = () => [{ title: "Privacy policy · FestiveBundle" }];
+
+const CONTACT = "info@metatroncubesolutions.com";
+
+export default function Privacy() {
+  return (
+    <main style={{ maxWidth: 720, margin: "48px auto", padding: "0 20px", font: "16px/1.6 system-ui, sans-serif", color: "#1a1a1a" }}>
+      <h1>Privacy policy</h1>
+      <p>Last updated: October 13, 2026. This policy explains what the FestiveBundle app (by Metatroncube Software Solutions) collects when a merchant installs it on a Shopify store.</p>
+
+      <h2>What we collect</h2>
+      <ul>
+        <li><strong>Store information:</strong> shop domain, currency, timezone and the plan you choose, to run the app.</li>
+        <li><strong>Offers you create:</strong> names, descriptions, images, product and collection references, dates and settings.</li>
+        <li><strong>Order summaries:</strong> for bundle analytics we store the order ID and number, order total, the discount given and which offer applied.</li>
+      </ul>
+      <p>We do <strong>not</strong> collect or store customers' names, email addresses, phone numbers or addresses.</p>
+
+      <h2>How we use it</h2>
+      <p>Only to provide the app: apply bundle discounts, show offers on your storefront, and report bundle sales to you. We don't sell data or use it for advertising.</p>
+
+      <h2>Where it's stored</h2>
+      <p>On our servers and in your Shopify store (app metafields and one automatic discount). Data is encrypted in transit (HTTPS).</p>
+
+      <h2>Retention and deletion</h2>
+      <p>When you uninstall the app, Shopify removes the app's discount and metafields. We delete all data about your store 48 hours after uninstall, when Shopify sends the shop/redact request. Customer data requests and redaction requests are answered as required; we hold no customer personal data.</p>
+
+      <h2>Contact</h2>
+      <p>Questions or requests: <a href={`mailto:${CONTACT}`}>{CONTACT}</a></p>
+    </main>
+  );
+}