BM: Country blocker IP blocker

We have never said, “Oh, you will still see it because they come to your website......” You mentioned installing many apps, so we don’t know which app’s support team told you that, but it was not us. You mentioned that after installing our app, you suddenly started getting 2,000 additional visits per day from different countries. We’re not sure what you are referring to here. If you’re suggesting that installing our app somehow made other bots notice your website and start attacking it, that is simply not possible. No Shopify app has the ability to attract traffic, trigger bots, or generate visits from thousands of IPs across different countries. On the other hand, if you believe our app directly generated this traffic, that is even less reasonable. Why would we, AFTER you installed our app, rent 2,000 IPs from different countries every day to attack your store, and then tell you we can’t fully handle it? That would serve no purpose and would only create unnecessary suspicion. Logically and technically, it makes no sense, and no app would do that. We checked the bot traffic on your store. The bot traffic was all coming from Huawei Cloud. Even if the IPs appear to be from different countries, our app had already successfully blocked them. What we cannot do is prevent other third-party tracking tools from recording these blocked visit attempts, which only result in an “Access Denied” response. That behavior is determined by Shopify’s architecture, and it applies to every storefront-level app. In other words, many tracking tools will still log the request even when the visitor is immediately blocked and only sees “Access denied.” It’s similar to blocking a number on your phone: the call is blocked, but you can still see a missed call. Even so, we did provide a method that can fully resolve this situation. The setup is a bit more involved, but by the time we shared it, the app had already been uninstalled. After you uninstalled our app and installed another app, the bot traffic stopped. We encourage you to take a rational look at everything that happened after installing our app, and if this traffic was truly caused by an app, then reconsider which app is actually more likely to be related. That said, we remain committed to helping merchants protect their stores and understand how Shopify security and traffic logging actually work. If you have questions or concerns, our team is always available to help.

To block a customer, you only need to click “Add” in the Blocklist and enter the visitor’s name, email, or phone(any one of them). We never ask for your name, email, or phone — it’s very clear that those fields are for entering the customer's information you want to block, not your own. We don’t believe this is a cumbersome process — it only takes two simple steps. You mentioned wanting an order list to choose from. However, what actually needs to be blocked is the visitor, not the order. Even if you meant blocking the customer associated with a specific order, that wouldn’t really make sense from a technical or logical standpoint — a visitor you want to block may not have placed any order at all. That’s why all visitor-blocking apps work this way. Also, please note that customer data in orders (such as name, email, and phone) is sensitive information. Our app strictly follows Shopify’s privacy policies — we do not store or expose this kind of personal data. The system only checks these fields at checkout to find matches. If blocking were done directly from order data, the app would have to store those sensitive details first — which would not only violate Shopify’s data-protection rules but also create an unnecessary privacy risk for you as the store owner. Even then, it would still be unclear which specific detail you actually want to block (name, email, phone, address, country, IP, ASN, referrer, etc.). That’s why all security apps require merchants to manually enter the visitor’s identifying information. As for customer support — yes, we have it. You can reach us anytime through the green email button in the bottom-right corner of the app, just like most websites (including yours) provide their contact option. We always respond promptly to every message we receive. In fact, we also sent you several messages offering help, but there was never any reply from you.

Our app absolutely does not leave any code behind after uninstallation. The code in your Theme was manually added by our developer at your request. We even applied for Collaborator access to your store, and only after you agreed and approved it, we added the code. Two months ago, when you installed our app, you mentioned that your store was receiving a large number of unknown visits during specific times. You didn’t know what they were or how to deal with them. Although this was not within the scope of our app’s services, we still helped you analyze the issue and found a solution for free. That’s why we added the code at the time. We also informed you clearly that this code needed to work together with our app, and that if you ever wanted to uninstall our app, you need to contact us to remove the code. You agreed to this and even discussed with us the possible effect of this code on visitors with slower internet connections. This code did solve your issue — our engineer spent two full days working on it, completely free of charge. However, two months later when you uninstalled the app, you did not inform us, and you did not remove the code yourself. That is why you still see the code. We’ve already explained to you several times where this code came from after we received your review. Shopify has long forbidden apps from directly inserting code into a merchant’s Theme. Our app does not have the ability to directly modify your Liquid files. This piece of code is not part of our app — it was manually added by our developer with your permission. So naturally, it would not be automatically removed when you uninstall the app.