A hosted store for shops Shopify will not keep

Standfast Commerce is a hosted store for glass, smoke-shop and vaporizer-hardware merchants that Shopify will not keep. Your domain, your product URLs, your Klaviyo list, your ShipStation account and your Authorize.net gateway, moved onto a host that will not delete your catalogue. A flat monthly fee, never a percentage of your sales. We never touch your money.

Trusted by sites like 420.com.

What happened

On 24 June 2026 Shopify emailed vape merchants a notice. The notice says Shopify no longer supports the sale of Electronic Nicotine Delivery Systems, "including e-cigarettes, e-liquids, vaporizers, parts, and refills, regardless of nicotine content." Merchants had until 8 July 2026 to remove the products or face suspension. There is no public policy page; the rule arrives by private email, store by store. A store that Shopify terminates has no export right under its Terms of Service. In August a merchant who sold only batteries and accessories, no nicotine and no cannabis, reported on the Shopify Community that Shopify no longer allowed his products.

Read what the notice actually says, with the dates and the sources.

Trusted by sites like 420.com

420.com, a vaporizer retailer with over 700 products, moved off Shopify onto Standfast Commerce in September 2026 and kept every product URL, so its search results kept working. The admin is shaped like Shopify's, so your staff already know where things are.

What moves with you

• Products, variants, prices, stock, tags and SEO fields, with the same handles, so /products/your-handle and /collections/your-handle keep working. Redirects and a sitemap are generated.
• Photographs, copied into your own storage before Shopify's links disappear.
• Collections, pages, blog posts, discount codes, URL redirects and a reviews CSV.
• Customers with their order history, and orders as history: nothing is re-charged, re-shipped or re-emailed.
• Or paste a read-only Shopify token and a mirror keeps your catalogue, customers and orders level every ten minutes until switch day.
• Not passwords. No platform can move them. Every customer sets a new one once, or signs in by emailed code.
• Not stored subscription cards. Every subscriber re-enters one card through a link we prepare and you approve.

Your data and your customers

Not a claim on a page — this is what the platform does for every store on it, yours included.

• Your own database. Every store gets its own database. No shared table, no query that can reach another store's rows.
• Your own file storage, private to your store. Product photos and uploads live under a storage prefix that belongs to your store alone. Nothing is public unless you publish it, and no other store's code can read it, list it or write to it.
• No cross-store access. A store's checkout, admin and background jobs are handed only its own database, its own storage and its own vendor keys — never another store's, by how the platform is built, not by promise.
• Your keys are sealed to your store. Klaviyo, ShipStation, Authorize.net and every other key you paste is encrypted so that even a copied database row cannot be opened anywhere but your own store.
• Two-step sign-in for staff, by default, with invite links, not shared passwords.
• We do not sell or share your customers' data. Not to us, not to anyone else. It is yours, on your store, under your own privacy policy.
• Exports any day. You can take your database and your files with you at any time. See the guarantee.

This is not a certification and not legal advice. See the PCI page for how card numbers are handled and the privacy page for what this site itself collects.

The apps you already pay for

Every app runs on your own account and your own keys, pasted once on the Apps screen. Klaviyo, ShipStation, AgeChecker, Avalara, Smile, Chargeflow, Tidio, Yotpo and Google. Each card says "connected" or "not configured" and nothing in between. Klaviyo flows come across as drafts you switch on; segments are rebuilt on the new event names and we hand you the list.

Payments run on your own Authorize.net gateway and your own merchant account. If you do not have a high-risk merchant account, the application is filed the day you sign, so it never waits behind the platform work. You sign with the processor, not with us. We never hold, route or touch your funds.

What is not built, said plainly

Read this before you call. Today the platform does not offer:

• Sezzle or any buy-now-pay-later.
• Judge.me, Stamped or Okendo reviews beyond a CSV import.
• Gorgias order lookup.
• Signifyd or NoFraud screening. Fraud checks are AVS and CVC only; keep your own.
• Route shipping insurance.
• Gift cards. Outstanding balances become single-use discount codes at import.
• PACT Act registration, monthly state reports, adult signature by product class, or a vape-accepting carrier. USPS, UPS and FedEx refuse vaping products; a store that needs a special carrier cannot be hosted yet.
• A consumer app in the App Store or Google Play. Both stores bar apps that sell vape, tobacco or THC products. Your shoppers get your website; your staff get an installable web app.
• Liquid themes or a theme marketplace. The storefront is one theme with your name, logo, colours and fonts, home-page sections you switch on, and custom CSS. A paid design port is available if you want your old look reproduced.
• Multi-currency, point of sale, or Metrc.

What it costs

Flat monthly fees, 0% of sales, month to month. Starter $149 a month. Growth $299 a month. Standby $99 a month for a store that has no notice yet and wants a mirror ready. Scale $2,000 a month for stores over $300,000 a month. Compliance $799 a month, from Q1 2027, for liquid-capable devices and 510 batteries. Migration $1,500 flat up to 1,000 products, $2,900 above that, or $0 with a 12-month prepay on Growth and up.

For comparison: BigCommerce charges 0.6% to 2% of sales when your gateway is Authorize.net or NMI, and a Shopify store on Basic or Grow paid a 1% to 2% third-party gateway fee on top of the plan. Every number is sourced on the rate card and the cost sheet.

How the switch goes

1. Export this week, whether or not you move. Products, customers, orders, discounts, pages, blog and theme images. The checklist is here.
2. Free dry run. Send us your products CSV. Within 48 hours you get a private preview link with your catalogue on it and the importer's problem list, row by row. Nothing signed.
3. Catalogue verdict. From your own product list we tell you which items are allowed, conditional or refused under our hosting policy, before you sign.
4. Sign. One page of business facts for our file. Processor statements and owner IDs go only to the processor, only if we file a merchant-account referral for you.
5. Your store is stamped. Your own database, your own storage, a provisional address, your first staff login with two-step sign-in, your brand.
6. Import, connect your apps, enter your gateway details. The Authorize.net Transaction Key is generated the morning of switch day; the old key keeps working for 24 hours so both checkouts take cards all day.
7. Rehearse. Sandbox orders, a label quote, a receipt to your own inbox. Then the same basket with a real promotion on your live Shopify store and on the new one, on a phone, a tablet and a desktop.
8. Switch, on your word. We copy every DNS record first, then you change one CNAME. Your email keeps working. Keep the Shopify plan read-only for 30 days for a final export, then close it yourself.

How long: with a clean export and a working merchant account, 5 to 7 business days from first call to live; the merchant-account application is the one item that can take longer, so it is filed on day one. The first merchants pay nothing until they are live plus 30 days.

The guarantee

A written go-live date. One month's subscription credited for every week we are late by our fault, capped at three months. Until your domain moves, you can walk away with your data and a full refund of anything prepaid. Your data exports any day.

Who we host

Legal glass, smoke-shop goods, rolling papers, dry-herb vaporizer hardware, cigars, leaf kratom where legal, and CBD that meets the federal definition on the ship date. We screen every store against the attorneys-general and FDA warning-letter lists before we host it. We do not host nicotine e-liquid, disposables or pouches today. The full policy is here.

Support

Checkout down, or an age gate or state block failing open: monitored around the clock, acknowledged within one hour, an owner paged. Everything else: email and tickets, Monday to Friday, 09:00 to 18:00 Pacific. Support hours and credits.