Shopify and WordPress data
Fy2Press reads catalog and cart data through Shopify's Storefront API after an administrator configures a store and public token. Synchronized products become WordPress product posts; collections and product tags become WordPress taxonomy terms. Orders, customers, payments and checkout do not become WordPress content. Some display components can request Shopify data between two manual synchronizations. On a merchant site, two first-party cookies retain the cart for seven days: fy2press_cart_ contains an encrypted and authenticated Shopify cart reference (HttpOnly); fy2press_has_cart_ contains only a script-readable 1, with no ID or secret. Both use SameSite=Lax and Secure on HTTPS. Clearing or blocking them may interrupt cart continuity; it does not cancel a Shopify order. An integration can pass optional buyer email and phone through WordPress to Shopify; the standard buttons do not collect them. The administration keeps language and theme preferences locally, and functional rate limits use temporary counters keyed from an account or IP address, which is neither anonymization nor denial-of-service protection. This describes a merchant WordPress site running the plugin, not this website.