Last updated 2026-07-29 · Shopify Store Roast · storeroast.tirelesslabs.com
Shopify Store Roast (storeroast.tirelesslabs.com) is one experiment run by Tireless Labs. This policy says what this site collects about you, why we are allowed to, who else sees it, how long we keep it, and how to make us delete it.
Controller: Tireless Labs — an autonomous, AI-operated venture lab, run and supervised by a human operator in the European Union.
Contact for any privacy question or request: support@tirelesslabs.com
You can also reply to any email we've sent you, or write to storeroast@mail.tirelesslabs.com — that's the address Shopify Store Roast sends from, and anything arriving there reaches us and gets acted on.
When you use Shopify Store Roast, we collect:
If you buy the €29 full audit, Polar takes the payment and sends us the order metadata — your email address, which product, and the amount. We then collect the store URL you send on the post-checkout page so we know what to audit. No card details ever reach us.
That is the whole list. We only ask for what the product needs to do the thing you asked for — nothing is collected “just in case”, and there are no hidden fields beyond a honeypot that catches spam bots and stores nothing.
We do not send marketing email. The delivery of your roast is the only email you get. Anything beyond that would need you to opt in first, explicitly — no pre-ticked boxes, ever — and every email we send says who we are and how to stop it.
We use Umami, which we host ourselves on the same server as this site. It sets no cookies, uses no cross-site or persistent identifier, does not fingerprint your browser, and sends nothing to any third party. Visits are counted against a hashed, daily-rotating value that cannot be tied back to you or followed from one day to the next.
Because no consent-requiring tracking technology is in use, there is no cookie banner on this site. If that ever changes, the banner appears before the tracking does — not the other way round.
Separately, the form endpoints hold your IP address in memory for up to an hour to stop one connection flooding the form. It is never written to our database, never written to a log file, and is gone when the hour passes.
We do not sell your data, and we never pass it to anyone for their own marketing. There is no ad network, no data broker and no tracking pixel anywhere on this site.
We keep your submission, the roast we generated from it and any order metadata for 12 months from the day we delivered — then we delete it.
Twelve months is long enough to answer a follow-up question about something we sent you or to sort out a payment dispute, and short enough that we are not sitting on your data for no reason. If you want it gone sooner, say so and it goes — see your rights, below.
Your roast is private between you and us. The only way it becomes public is if you explicitly tell us to — by replying PUBLIC to the delivery email. Nothing is opt-out, and staying silent means it stays private.
If you do opt in, that consent covers that one roast only — never a future one, never anything else you own. Before it goes up we strip your email address, your name, and anything you told us privately rather than published yourself; security-relevant findings are never published at all, even if that guts a section.
You can pull it down at any time, for any reason, no questions asked — email storeroast@mail.tirelesslabs.com and it is gone within 24 hours.
Under the GDPR you can ask us, at any time and without giving a reason, to:
Email support@tirelesslabs.com or storeroast@mail.tirelesslabs.com, or just reply to any email we have sent you. We aim to act within a few days and are bound to act within 30 days at the outside. We will tell you what we deleted when it is done.
One honest limit: if you paid, the payment record itself sits with Polar as merchant of record, under retention rules that tax and accounting law impose on them rather than on us. We will delete our own copy of your order metadata immediately, and point you at Polar for theirs.
If you think we have handled your data badly, you are entitled to complain to your national data protection authority. We would rather you told us first — write to support@tirelesslabs.com and we will fix it.
Every roast this site sends is written by AI (Claude, made by Anthropic) — never by a human reviewer, and never presented as one. That is the product, on the free round and the paid tier alike.
On our side, what you submit is used to produce your roast and for nothing else — we do not repurpose it, mine it, or pass it to anyone for their own purposes. Producing the roast does mean sending it to Anthropic, whose own terms govern what happens to it there; see “who else can see it”, above.
We say this because the EU AI Act's transparency rules require it, and because it is the honest thing to tell you before you hand something over.
If this policy changes, the date at the top changes with it. This is version 2026-07-29 — the first published version.
An experiment by Tireless Labs — an autonomous, AI-operated venture lab.