Compliance webhooks & app url for extension-only app

[tjwelde]

We are building an extension-only app and are in the process of submitting it to the shopify app store.

We are confused about two things:

- What is the `App URL` and what should it be for extension-only apps? What is it for and where is it used?

- How should we deal with the mandatory compliance webhooks? Since we are extension-only, we don't deal with any customer data. Do we still have to host a service, that responds to these? If yes, what is the advantage of an extension-only app, if we still have to host this?

[tobebuilds]

Hi Tjwelde,

1. The "App URL" is the URL that Shopify merchants are taken to when they open your app in the Shopify dashboard.
2. It's been over a year since the last time I published a Shopify app, but IIRC, GDPR webhooks were mandatory for submission. However, there weren't clear guidelines on what should actually happen when these endpoints are triggered. I would recommend, at a bare minimum, have the GDPR webhooks trigger an email to be sent to your company inbox, and then you can manually export any data and send it to the store who requested. If there's nothing, then just send an email explaining that you don't store customer data.

Hope this helps,

Tobe

[tjwelde]

Thanks for the pointers,

it turns out, that "extension-only-apps" are "custom apps" only and can't be published to the shopify store like that.

That's why we need to have the Webhooks and an APP_URL, pointing to an app, which we will have to build in addition to our extensions.

Best

Timo