Your store. Your data.

Who operates Kursa

Kursa is developed and operated by Murdeni. Contact feri@murdeni.com with questions about privacy or requests concerning your information.

Information used to provide the app

• Store and app information: your Shopify store domain, installation status, access tokens, authentication sessions, and app configuration, including currencies, rounding, switcher appearance, and placement.
• Merchant account information: Shopify authentication sessions can include a merchant user ID, name, email address, locale, and account ownership information when supplied by Shopify.
• Product and theme information: product and variant identifiers and amounts needed for conversion, your money formats, and published-theme settings used to verify the app embed. The app requests product and theme access, not customer or order API access.
• Support communications: information you choose to send us, such as your email address, store URL, screenshots, and a description of an issue.
• Technical request information: our hosting and infrastructure providers may process IP addresses, browser information, timestamps, and request logs to deliver and secure the service.

Shopper information and browser storage

Kursa does not create shopper profiles or request customer names, addresses, payment details, or order history from Shopify. The currency switcher stores the selected currency in the shopper’s browser using localStorage. This value persists until it is changed or cleared and is scoped to the storefront domain.

When location-based switching is enabled, Kursa uses the country context supplied by Shopify to select an initial display currency. It does not request precise GPS location. The storefront script reads displayed amounts and product identifiers to perform conversions.

How information is used

We use information to authenticate the installed app, deliver currency settings and exchange rates, calculate display amounts, verify setup, maintain security, investigate technical issues, and respond to support and privacy requests. This public website does not include advertising trackers or an analytics integration added by Kursa.

Service providers and sharing

Kursa uses Shopify for app authentication and storefront integration, Vercel for hosting, and Supabase for database storage and public assets. Shopify resources may load from Shopify’s CDN. Public website fonts load from Google Fonts. The Help page embeds a YouTube video; loading or playing it sends browser requests to YouTube, which may use cookies under its own privacy settings. When country flags are displayed, the shopper’s browser requests flag images from FlagCDN; that provider receives the information ordinarily included in an image request, such as the IP address and browser headers.

We do not sell personal information. Information is processed by service providers as needed to operate the service, and may be disclosed when required by applicable law or to protect the service. Providers may process information outside your country.

Retention and deletion

Store configuration and authentication information are kept while needed to operate the installation. Uninstalling disables the public converter and removes its Shopify sessions. Shopify’s shop-redaction request triggers removal of Kursa-owned configuration and credentials. Data owned by a separately installed companion app is not deleted by Kursa. Provider backups and technical logs may remain under their retention practices. Support messages are retained as needed to address the request and related follow-up.

Your choices and requests

Merchants can change settings, disable the theme embed, or uninstall Kursa. Shoppers can change the display currency or clear the storefront’s browser storage. To request access, correction, or deletion of information you provided to Murdeni, email feri@murdeni.com. We may need to verify your identity or authority over the store. Requests are handled subject to applicable rights and legal retention requirements.

Kursa responds to Shopify’s mandatory privacy webhooks. Customer requests are acknowledged without retaining their payloads because Kursa does not hold Shopify customer profiles or order records.

Security and policy changes

We use encrypted network connections, server-side credentials, authenticated Shopify requests, and verified webhook signatures. No method of transmission or storage can guarantee absolute security. We may update this policy as the app changes; the date above identifies the latest revision.