Marley's Pixel privacy policy

Last updated 2026-11-02.

What this app does

Marley's Pixel installs a Shopify web pixel on your store. The pixel sends storefront and checkout events to our server so they can be analysed. The merchant installs the app; shoppers on the store are the people whose events are recorded.

What we collect

For each event, only when the shopper allows analytics through the store's cookie banner (Shopify enforces this before the pixel runs):

• The event name and time: page viewed, product viewed, collection viewed, search submitted, product added to or removed from the cart, cart viewed, checkout started, shipping info submitted, payment info submitted, checkout completed.
• Shopify's anonymous browser identifier (clientId) and, if the shopper is logged in, their Shopify customer ID.
• The page path (no query string, apart from the campaign tags utm_source, utm_medium, utm_campaign, utm_term and utm_content) and the host of the referring site.
• Product, variant, collection, cart, checkout and order identifiers, quantities, prices, currency and totals.
• The words entered in the store's search box (dropped if they look like an email address or phone number).
• Your store's .myshopify.com domain.
• The IP address and browser user agent of the request, which our server receives with every event and stores with it.
• For the app itself: an access token to your store's Admin API with the permissions write_pixels and read_customer_events.

What we do not collect

Names, email addresses, phone numbers, postal addresses, payment details, or anything typed into checkout fields. The pixel does not set cookies and does not read the shopper's browser storage.

How we use it

To provide analytics about storefront behaviour. We do not sell the data, share it with advertisers, or use it to profile shoppers across stores. Events from one store are never joined with another store's.

Where it is stored

Events are stored in Google Cloud BigQuery in the United States. Access is limited to the people who operate the service.

How long we keep it

We keep storefront events for 13 months, then delete them, or earlier when a deletion request described below applies.

Deleting data

• When you uninstall the app, we delete your store's access tokens at once. When Shopify sends its shop erasure request (about 48 hours after uninstall) we delete all remaining events for your store.
• When a customer asks a merchant to erase their data, Shopify sends us a customer erasure request and we delete the events tied to that customer ID and their orders.
• When a customer asks for their data, Shopify sends us a data request; we find the events tied to that customer ID and their orders and give them to the merchant.
• You can turn the pixel off at any time on the app's home page; this removes the pixel and we stop receiving events.

Contact

Questions or requests about this policy: privacy@marleyagent.com.

General questions and support: support@marleyagent.com.