Privacy Policy

Last updated: August 10, 2026

This policy covers the Apothecary marketing website, operated by Ecropolis LLC (Texas, USA). The Apothecary app itself runs inside Shopify and is covered by its own data-processing terms shown during installation.

What we collect

If you contact us — through the contact form or by email — we receive the details you send (name, email address, optional phone number and subject, and your message) and use them only to respond. The form is operated for us by Ecropolis's shared form service, which relays the message to our inbox and keeps a copy for 180 days before deleting it automatically. It uses Cloudflare Turnstile to check that submissions come from a person rather than a bot; Turnstile is a privacy-preserving alternative to a CAPTCHA and does not track you across sites. If you subscribe to updates via the footer form, your email address reaches us through that same form service and we use it only to send those updates; every email includes an unsubscribe link.

Cookies & analytics

This website uses Google Analytics via Google Tag Manager for basic traffic measurement. Which rules apply depends on where you appear to be. If you appear to be in the EEA, the UK or Switzerland, nothing is requested from Google and no analytics cookies are set until you accept via the cookie banner — decline, or simply ignore it, and no Google script loads at all. Everywhere else, analytics start on your first page view and the banner invites you to opt out; if you decline we stop analytics, switch Google Analytics off for this site, and delete the analytics cookies already set, so only that first page view was ever counted. Your choice is stored in your browser and remembered on return visits.

We work out which of those applies from your browser's own time-zone setting. That is a rough guess and it can be wrong — a VPN or a trip abroad will fool it. We deliberately do not use the Geolocation API (which would prompt you) or an IP address lookup, and if the time zone cannot be read we apply the stricter, consent-first rules.

You can change your choice at any time using the Cookie settings link in the footer. We do not use advertising or cross-site tracking cookies — analytics consent grants traffic measurement only, with Google Consent Mode's advertising signals kept off.

Service providers

• Cloudflare, Inc. — website hosting and content delivery, and the Turnstile anti-spam check on the contact form.
• Google LLC — website traffic analytics (Google Analytics via Google Tag Manager), subject to the cookie choices described above.

What we don't do

We don't sell your data. We don't run advertising or cross-site trackers on this website. We don't load any analytics before you've said yes if you're in the EEA, the UK or Switzerland — and everywhere else, declining stops analytics and deletes the cookies already set.

Contact

Questions about this policy or your data: [email protected].