The short version. chablyy.com sets no advertising or tracking cookies. The Chablyy chat on a Shopify store keeps a few identifiers in the shopper's browser, so a conversation can continue and an order can be linked to a chat. The Chablyy web pixel follows Shopify's consent settings. Everything is listed below.
1. What this page covers
This page covers four things: this website (chablyy.com), the Chablyy app inside your Shopify admin, the Chablyy chat on a merchant's storefront, and the Chablyy web pixel. For how we handle personal data more generally, see section 12 of the Privacy Policy.
2. This website
chablyy.com doesn't set its own cookies and doesn't write to your browser's local or session storage. You can browse every page without accepting anything.
We use Vercel Web Analytics and Vercel Speed Insights, in production only, to count page views and measure how fast pages load.
- Web Analytics. Vercel says it doesn't use third-party cookies. It identifies visitors with a hash created from the incoming request, and that visitor session isn't stored permanently: it's discarded after 24 hours. A data point can include the page URL, the referrer, approximate location, device type, operating system and browser.
- Speed Insights. Records page speed for a visit: the route, URL, network speed, browser, device type, operating system and country. Vercel says it doesn't collect information that would let it reconstruct a browsing session or identify a visitor.
We also record which "Add to Shopify" button was clicked, for example the one in the header or on the pricing page, so we know which pages help people find the app. That event carries no personal information.
Read more in Vercel's pages on Web Analytics privacy and Speed Insights privacy.
The "Add to Shopify" buttons open our listing on the Shopify App Store. We add utm_source, utm_medium and utm_campaign to the link so we can tell which page the visit came from. Once you're on Shopify, Shopify's own cookie and privacy policies apply.
3. The contact form
The contact page uses Cloudflare Turnstile to tell people from automated bots. The Turnstile script is loaded from challenges.cloudflare.com, only on the contact page. Cloudflare says Turnstile processes signals such as your IP address, TLS fingerprint, User-Agent header, and the site key and origin, to detect and block bots, and that it can't directly identify individuals from those signals. See the Turnstile Privacy Addendum for what it stores and for how long.
If you send us a message, it is emailed to our support team through Resend. It isn't stored on this website, and we use your details only to reply.
4. Chablyy in your Shopify admin
Chablyy opens inside your Shopify admin. To keep you signed in, it stores a session token in your browser's local storage under the name chablyy_shopify_jwt. Shopify's own cookies in the admin are governed by Shopify's policies.
5. The Chablyy chat on a store
When a merchant turns on the Chablyy Chat app embed, the chat runs on the merchant's storefront and stores the items below in the shopper's browser. They are first-party items on the store's own domain. The * stands for the chat's embed key.
| Name | Type | What it is for | How long |
|---|---|---|---|
_chablyy_vid | Cookie | A random visitor ID, so the chat can recognize a returning visitor and the merchant can see which orders followed a chat. | 30 days |
_chablyy_sid | Cookie | The ID of the current chat session, for the same purposes. | 30 days |
chablyy_visitor_*, chablyy_session_* | Local storage | The same visitor and session IDs, kept so the chat can find them again. | Until cleared |
chablyy_resume_* | Local storage | A token that lets a shopper pick a conversation back up. | Until cleared |
chablyy_eng_suppress_*, chablyy_eng_abandon_* | Local storage | Timers, and a small snapshot of the cart (item count and subtotal), for the merchant's optional proactive prompts, so a prompt isn't shown again too soon and can recognize a return to an abandoned cart. | Until cleared |
chablyy_open_*, chablyy_attr_* | Session storage | Whether the chat panel is open, and a mark that a chat view was already counted, so it is counted once per visit. | Until the tab closes |
When a shopper adds something to the cart, the visitor and session IDs are also copied to the cart as attributes named chablyy_vid and chablyy_sid. They stay with the order, so the merchant can link an order to a chat.
6. The Chablyy web pixel
Chablyy installs a Shopify web pixel on the store. It listens for three events: add to cart, checkout started and checkout completed. It sends them to Chablyy with the visitor and session IDs above and the event details Shopify provides (for a completed checkout this includes the order number, total and currency). Chablyy uses them to show the merchant which orders followed a chat (assisted revenue).
The pixel follows the shopper's choices in Shopify's Customer Privacy settings. It is registered for analytics only: marketing, preferences and the sale of data are switched off.
7. Your choices
You can block or delete cookies and site data in your browser settings. If you do, the chat on a store starts fresh on your next visit, and nothing else stops working.
The items in section 5 are set by the chat itself. They are separate from the choices a shopper makes in the store's cookie banner, so merchants should list them in their own cookie notice. Merchants manage their store's cookie banner and consent settings in Shopify.
8. Changes and contact
We'll update this page if the website or the app starts using anything new, and change the date at the top. Questions: support@chablyy.com.