Cookie and tracking notice of RETEX
Version 1.0 · Last updated: 2026-10-05 · ARSHIVE GROUP - FZCO, a Dubai free zone company, licence number 64407, IFZA Business Park, DDP, Premises no 64407-001, Dubai Silicon Oasis, Dubai, United Arab Emirates. Contact: support@retexapp.com.
This notice explains what RETEX stores in your browser and why. It complements the Privacy Policy.
In short: RETEX uses only strictly necessary storage. It uses no analytics, advertising or tracking cookies, and no third-party tracking scripts.
1. The law behind this notice
Article 5(3) of Directive 2002/58/EC (the ePrivacy Directive), as implemented in the national law of the countries where we operate, requires consent before information is stored on, or read from, a user's device, unless that storage is strictly necessary to provide a service the user has explicitly requested. Where cookies or similar technologies involve personal data, Regulation (EU) 2016/679 (GDPR) also applies, and consent must meet Article 7 GDPR. "Cookies" in this notice includes similar technologies such as local storage and session storage.
2. The merchant admin (inside the Shopify admin)
Merchants and their staff use RETEX inside the Shopify admin. Sign-in is handled by Shopify. The app receives short-lived session tokens from Shopify's App Bridge rather than relying on cookies, and keeps the resulting session on our server. While a merchant authorises the app, our server may set a short-lived cookie that protects the sign-in against forged requests. These items are strictly necessary for an authenticated merchant to use the service they asked for, so no consent banner is shown. Shopify also sets its own cookies in the Shopify admin; they are covered by Shopify's own notices.
| Name or type | Purpose | Duration | Category |
|---|---|---|---|
| Sign-in protection cookie (set while the app is being authorised) | Prevents forged authorisation requests | Minutes, during sign-in only | Strictly necessary |
| App Bridge session token (held in memory, not a cookie) | Proves to our server that a request comes from a signed-in Shopify user | About one minute, then renewed | Strictly necessary |
3. The customer return portal
The return portal is shown inside the merchant's online store through the Shopify app proxy. Shopify removes cookies from app-proxy responses, and the portal sets no cookies of its own. The portal stores nothing in your browser except what the page needs to work while you complete a request.
The merchant's online store, its theme and any other apps it uses may set their own cookies. They are the merchant's responsibility and are described in the merchant's own cookie notice.
4. Public pages
The legal and support pages of RETEX set no cookies.
5. Our rule for anything else
If we ever add analytics, error tracking that identifies a visitor, marketing pixels or any other non-essential technology to the return portal or to the public pages:
- it will not run until the visitor has given consent;
- consent will be collected through, and respect the choices made in, Shopify's Customer Privacy API, so that it matches the consent the visitor gave on the merchant's storefront;
- this notice and the list of sub-processors will be updated before the technology goes live.
6. Managing cookies
You can delete cookies or block them in your browser settings. Blocking strictly necessary cookies in the admin can stop sign-in from working. Because the portal sets no cookies, no choice is needed there.
7. Contact
Questions about this notice: support@retexapp.com.