eShip Barcode Scan — Privacy Policy
Last updated 23 September 2026
eShip Barcode Scan is a Chrome extension built by NZ Tack Saddlery Co for its own packing staff. It lets a person scan a product barcode on the eShip orders page, filters that page to the orders containing the matching product, shows the open Shopify orders for that product, and verifies items during packing.
What the extension collects
Nothing. The extension does not collect, store or transmit personal information, and it has no analytics, telemetry or tracking of any kind. Its developer receives no data from it whatsoever.
What it sends, and where
When a barcode is scanned, that barcode is sent to the Shopify store configured in the extension's settings, using that store's own Admin API, in order to find the product's SKU and the open orders containing it. Those are the only network requests the extension makes. Nothing is sent anywhere else, and no other information leaves the browser.
The extension reads the eShip orders and packing pages in order to filter and verify against them. It does not transmit anything it reads there.
What it reads from Shopify
The Shopify access token used by this extension requires two read-only permissions:
- read_products, to turn a scanned barcode into a product SKU.
- read_orders, to show which open orders are waiting on that product, including unpaid and pick-up orders that are never imported into eShip.
Because read_orders covers order records, the token can reach customer details attached to those orders. The extension displays only order numbers, dates, payment status and delivery method. It does not display, store or transmit customer names, addresses or contact details. The token holds no write permissions and cannot change anything in the store.
What it stores on your computer
The extension stores three settings in Chrome's local extension storage: the Shopify store address, the Shopify Admin API access token, and the API version. These stay on the computer they were entered on and are never transmitted except as the credential for the Shopify requests described above.
On a centrally managed computer, an administrator may instead supply these settings through Chrome enterprise policy, in which case the extension reads them from there and they are not entered or stored by the user.
Third parties
None. The extension communicates only with the Shopify store its user configures. No data is shared with, sold to, or passed through any third party, and the extension contains no remote or externally hosted code.
Permissions
- Storage, to keep the settings above, and to read administrator policy on managed computers.
- eship.nzpost.co.nz, because the extension's drawer, filtering and packing checks operate only on eShip pages.
- *.myshopify.com, to look a scanned barcode up in the configured Shopify store and find the open orders for it.
Retention and removal
Settings persist until they are changed or the extension is removed. Uninstalling the extension deletes them. No data is retained anywhere else, because none is collected.
Contact
Questions about this policy can be sent to sales@nztack.co.nz.