Account settings
Plan: every plan, including Free. The Developer API needs Premium.
Settings › Account has nothing to save. It is the way into the pages that aren’t in the app menu, plus the security facts about your store’s data.
Import wishlists
Section titled “Import wishlists”“Bring saved items over from Swym or any CSV. Preview first; nothing is saved until you confirm.”
- Import opens the import page.
- Below it: the date of your last import and its status (Imported, Didn’t finish, Preview ready, Checking file, Importing or Canceled), or “No import yet.”
See Import wishlists and File formats.
Developer API
Section titled “Developer API”“Server-to-server access to your store’s wishlists with per-store API keys.”
- Manage keys opens the Developer API page, where you create and revoke keys.
- The badge shows Included on Premium, or the plan it needs (Premium) below it.
- The line beside it counts your active keys. Below Premium, keys you already have are kept but paused (“2 keys, paused until you’re on Premium”) and work again when you move back.
See REST API.
Security and data
Section titled “Security and data”“What the app can reach, what it never asks for, and what it keeps.”
| Topic | What the section says |
|---|---|
| Access | read_orders, read_products, read_customers, unauthenticated_read_product_listings, write_app_proxy. Read-only, except routing /apps/wishlist on your store to the app. |
| Never asks for | write_themes, write_script_tags, write_online_store_pages, write_products, write_customers, write_orders, read_all_orders: the app can’t edit your theme, add scripts or change products, customers or orders. An automated test blocks any release that adds a permission. |
| Remote code | None. Storefront code ships only inside the versioned theme extension; the design is rendered by Shopify’s Liquid. |
| Stores | Shopify IDs, saved product and variant IDs, list names, notes and share links. Never names, phone numbers or addresses; a guest’s “Notify me” email is encrypted and deleted once the alert is sent. |
To report a security issue, email the address shown in the section, or read the full security page it links to. See Security and Privacy and GDPR.