Skip to main content

​
Webhooks

​
Inbound Shopify webhooks

The app subscribes to the following Shopify webhook topics (declared in shopify.app.toml):

​
Compliance webhooks

Privacy-related mandatory topics handled through a single compliance webhook URI:

​
How redaction works

After an authenticated app/uninstalled webhook records the uninstall signal, a later shop/redact deletes all shop data. The handler uses HMAC body fingerprinting for retry suppression. Session absence alone is never treated as proof of uninstall. Legacy ambiguous requests are recorded for reconciliation.

​
Outbound webhooks

The app emits domain events as signed outbound webhooks via a Svix-compatible delivery system.
  • Delivery uses HMAC signing.
  • Retry backoff: 1 minute → 12 hours.
  • Admin UI provides endpoint management, subscription configuration, delivery logs, and replay.
  • Delivery logs with replay are available through the Settings > Webhooks Configuration page.

​
Outbound webhook topics

Outbound webhooks cover all major domain events: points awarded, redeemed, expired; tier changes; referral completions; achievement unlocks; and more. Manage endpoint subscriptions from the admin UI.

​
Scheduled processing

Tier downgrades, paid membership renewals, points expiry warnings, and retries of failed outbound webhook and Shopify Flow deliveries run as scheduled background jobs inside the app. They are not part of the public API.