Guest to Customer Account Merging

When an anonymous guest adds items to their wishlist, their preferences are stored under an encrypted local token. Upon customer authentication (login, account creation, or checkout), the client merges their guest list with their cloud profile seamlessly.

How Account Merging Works#

1. Guest Browsing: Items are saved in IndexedDB / LocalStorage under a random session UUID.
2. Customer Log In: The storefront detects a valid customer access token via App Proxy.
3. Automated Cloud Merge: The client sends a merge payload to synchronize guest items into the customer's permanent account metafield without duplicates.

Cryptographic Session Security#

All App Proxy sync requests are HMAC-signed by Shopify, ensuring shopper data is protected against tampering and cross-site impersonation.