# Privacy policy changes

Last updated 28 October 2026. Last reviewed 18 October 2026. Version 2.2.
Web version: https://commitandpush.io/privacy/changes/

We list every change to our privacy policy here, newest first. For material changes, we also tell merchants by email or in the app at least 14 days before they apply. Changes to our suppliers are listed on our [sub-processor page](/privacy/subprocessors/#list-changes).

To follow changes without installing our apps, subscribe to our [Atom feed](/privacy/changes.atom) in any feed reader. It covers both this page and our sub-processor list.

## 28 October 2026: version 2.2 {#v2-2}

- Our apps' short-term cache now runs on Google Cloud in the United States instead of Upstash, so Upstash is no longer one of our [sub-processors](/privacy/subprocessors/#list-changes). Cached data still stays in the United States for no more than 15 minutes, and is now also encrypted at rest.

## 19 October 2026: version 2.1 {#v2-1}

- Renamed the footer link that changes your analytics choice from "Cookie settings" to "Privacy choices", because it also controls our cookie-free page request statistics.

## 18 October 2026: version 2.0 {#v2-0}

- Replaced the website privacy notice with one privacy policy covering our websites, our Shopify apps and the Shopify App Store.
- Added the [Discount Magic](/privacy/discount-magic/) page, our [sub-processor list](/privacy/subprocessors/) and our [Data Processing Addendum](/privacy/dpa/) for merchants.
- Added our roles as controller and processor, legal bases, marketing choices, where your data is kept, international transfers, retention, security, complaints and regional information.
- Linked the policy and the Data Processing Addendum to our new [terms of service](/terms/).

## 20 September 2026: version 1.0 {#v1-0}

- First privacy notice for commitandpush.io, covering optional website analytics and page request statistics. [Read version 1.0](/privacy/archive/2026-09-20/).