Terms of service

These terms apply to every store that installs FirstFrame Bot Blocker. Installing the app means the store agrees to them. Last updated 4 November 2026.

The service

Once the store switches on the app embed in its theme, the app checks each visit for robot-controlled or screenless browsers and, if the store chooses, for visits from data-centre and proxy networks. In "Watch only" it blocks nobody and counts what it would block. In "Block" it shows flagged visitors a short message instead of the store and refuses cart and checkout requests from that page. Good crawlers (search engines, social previews, AI shopping assistants) are never checked.

Price

Free plan: watch only, with all reports.
Standard plan: blocking, US$6.99 every 30 days after a 7-day free trial, billed by Shopify on the store's Shopify invoice. Uninstalling or moving back to the free plan stops the charge.
Everything is free on Shopify development stores.

What the app can and cannot do

It reduces bot traffic that loads the store in a browser. Bots that never load the store's pages (for example ones that call checkout links directly) are outside what a theme app can see, and no tool stops every bot.
Network checks can flag a real shopper using a VPN, proxy or work network hosted in a data centre. The store decides whether to block those, can show an "I'm a person" button, and can allow any network. The store is responsible for its settings.
Checks fail open: if a check cannot be completed, the visitor is let through.

Data processing

The app holds no customer personal data. Visitor IP addresses are processed in memory only, to look up the network, and are never stored. The app keeps daily counts and network names per store, the store's settings and its contact email.

For that data the store is the controller and we process it only to provide the service above. We never sell it and never use it for advertising.
Sub-processors: Shopify (the platform), Railway (hosting, data encrypted at rest), Team Cymru (network directory lookups) and our email provider.
Counts are kept for 90 days. When a store uninstalls, the script is removed and access tokens are deleted; when Shopify asks us to erase a store's data, all of it is deleted.
If we learn of a security incident affecting a store's data, we tell the store and Shopify within 72 hours. How we protect data is on the security page.

Fair use

Use the app only for stores you run, within Shopify's terms.

Liability

To the extent the law allows, our total liability is limited to the fees the store paid for the app in the 12 months before the claim. We are not liable for sales lost to blocked visitors or to bots the app did not stop.

Changes and contact

We may update these terms; the date above changes when we do. Singapore law applies. Questions: adam@inlinex.com.sg.