← Private CheckoutRoadmap

What we're building, in the order we're building it

This is an honest list. Everything in Shipped runs on privatecheckout.app today. Items in In progress have code landing but aren't generally available yet. Coming soon is next in the queue. Later is the longer-horizon backlog — it's where we park ideas we like but haven't scoped yet. Priorities can shift based on what merchants ask for.

Shipped

LiveWhat's working on privatecheckout.app today.

  • Encrypted private checkout

    Customer name, email, and shipping address are AES-256-GCM encrypted at rest. The merchant never sees any of it — only a prepaid shipping label with the fulfillment info they actually need.

  • Prepaid USPS shipping labels

    Shippo-generated labels purchased automatically after payment, charged to the customer up front. Merchant prints and ships — no address data handling on their side.

  • Stripe Connect payouts

    Payments route via Stripe destination charges with a per-order merchant rebate. Merchants get paid on their normal Stripe payout schedule.

  • Multi-item carts with smart multi-package shipping

    Carts can contain any number of items. If a cart is too heavy for one box, we automatically split into multiple shipments per the merchant's chosen strategy — split, use a larger overflow box, or both.

  • WooCommerce integration

    A single PHP snippet drops a 'Buy with Private Checkout' button into product, cart, and checkout pages. Automatically detects multi-item carts and routes to the matching checkout.

  • Customer self-serve orders

    Customers who complete a purchase can create an account to see all past orders and tracking numbers — their shipping details, encrypted on our side, are the only place they can view them.

In progress

BuildingWork actively in flight — not shippable yet, but code is landing.

  • Hide-My-Email email relay

    Per-(customer, merchant) alias addresses on relay.privatecheckout.app. Merchants write to the alias; we forward to the customer's real inbox after decrypting internally. Customer's real email never reaches the merchant's CRM.

  • Shopify Checkout UI Extension

    A proper Shopify app that keeps the customer inside Shopify's checkout instead of redirecting away. Includes multi-item cart support and auto-pulling product data from the merchant's catalog.

Coming soon

NextScoped, prioritized, waiting for a focused chunk of time.

  • Native WooCommerce plugin

    A proper WordPress plugin that handles product-to-PC mapping, cart detection, and settings through a native admin UI. Replaces the current PHP snippet.

  • Private marketplace

    An opt-in public listing at privatecheckout.app/marketplace where merchants can appear with their products. Curated 'Top stores' section. Discovery for customers who want to buy privately.

  • Multi-currency support

    USD today. Settlements and checkout in CAD, GBP, EUR, and AUD planned so merchants outside the US can accept with their local pricing.

Later

IdeasNot scheduled yet. Ordering reflects rough priority but anything here can shift based on what merchants ask for.

  • Mobile wallets in checkout

    Apple Pay and Google Pay directly in the PC-hosted checkout.

  • Platform API

    A documented REST API for custom integrations outside Shopify / WooCommerce — SquareSpace, BigCommerce, custom storefronts.

  • Automated address verification

    USPS address lookup during checkout so typos and partial addresses get corrected before the label gets purchased.

  • Promo codes & discounts

    Merchant-defined promo codes applied at PC-hosted checkout. Percentage, flat, or free-shipping variants.

  • Subscription / recurring billing

    Opt-in recurring charges with the same privacy guarantees as one-off checkout.

  • Merchant analytics

    In-dashboard trends — orders over time, revenue, shipping breakdown. Without exposing customer-level data to the merchant.