Pixelfy: Multi Facebook Pixels Privacy Policy

Effective date: 10 November 2026. This version replaces the policy dated 23 August 2021.

Pixelfy is a Shopify app that sends a store's sales and browsing events to the advertising pixels the merchant chooses (Meta, TikTok, Snapchat, Pinterest, X and Taboola) and builds product feeds for Meta catalogs. This policy explains what personal data Pixelfy processes, why, who receives it, how long it is kept and how to have it deleted. It covers two groups of people: merchants who install the app, and shoppers who visit a merchant's store.

For shoppers' data, the merchant decides which pixels to use and why; Pixelfy processes the data on the merchant's behalf and only to provide the app's service to that merchant.

1. Data about merchants

What	Why
Your store's Shopify domain, the app's access token from Shopify, and your Pixelfy plan	To run the app in your store and apply your plan
The pixel IDs and access tokens you enter for Meta, TikTok, Snapchat, Pinterest, X and Taboola, and the pages or collections you assign them to	To send your store's events to your own advertising accounts
If you connect Meta catalogs: your Meta access token (stored encrypted), the selected business, catalog and pixel	To create and update your catalogs
Your products (titles, descriptions, prices, stock, images, links)	To build the product feeds you create

Billing is handled by Shopify; Pixelfy never sees your card details.

2. Data about shoppers in a merchant's store

When a shopper browses a store that uses Pixelfy, the app processes:

Browsing and purchase events: pages and products viewed, searches, items added to the cart, checkout steps, order value, currency, product IDs and order ID.
Technical data: IP address, browser (user agent), page address, and the advertising networks' own cookies or click IDs (for example Meta's _fbp and _fbc).
At checkout only: email address, phone number, first and last name, city, postal code and country, as Shopify provides them to the app.

Why: so the merchant's advertising accounts can count sales and other actions, match them to their ads (conversion measurement) and avoid counting the same event twice. Pixelfy does not use shoppers' data for any other purpose: not for its own marketing, not to build profiles, and it never sells it.

3. Who receives shoppers' data

The advertising networks the merchant has set up in Pixelfy, and only those: Meta (Facebook and Instagram), TikTok, Snapchat, Pinterest, X and Taboola. Events are sent from the shopper's browser and, for Meta, TikTok and Snapchat, also from Pixelfy's server (for example Meta's Conversions API). Email, phone, name and address details are hashed (SHA-256) before Pixelfy's server sends them to these networks. Each network processes the data under its own terms and privacy policy, and under its agreement with the merchant.
Service providers that run Pixelfy: our server host (DigitalOcean, United States); Cloudflare, which the storefront script asks for the visitor's IP address; and Google's library CDN, which serves a script library.
Authorities, when the law requires it.

4. Consent

Pixelfy's checkout tracking runs under Shopify's Customer Privacy API: it follows the shopper's choice in the store's cookie banner and stays off for shoppers who opt out of the sale or sharing of their data. Pixelfy's storefront script loads the pixels the merchant has set up on the store's pages for every visitor. Where the law requires consent before advertising pixels load (for example in the EU and the UK), the merchant is responsible for obtaining it and for telling shoppers about the pixels they use.

5. How long data is kept

Shoppers: Pixelfy does not store shoppers' contact details or events in its database. They pass through our server only to be forwarded to the networks above. Our server's technical logs (IP address, browser, page address and time of each request) are kept for at most 15 days for security and fault-finding, then deleted.
Merchants: while the app is installed. When a merchant uninstalls the app, Shopify asks us 48 hours later to erase that store's data, and we delete it then. Backups that may still contain it are deleted within 5 weeks.

6. Security

All data travels over encrypted connections (HTTPS). Access tokens for Meta catalogs are stored encrypted. The server accepts administrative logins by key only from the people who run the app, and the Shopify account behind the app uses two-step verification.

7. Your rights and deletion requests

Shoppers: to access or delete your data, contact the store where you shopped. Shopify passes the store's request on to Pixelfy, and we act on it. Because Pixelfy does not keep shoppers' data, there is normally nothing held by us to return or delete. Data already sent to an advertising network is held by that network; you can ask it directly.
Merchants: you can ask us at any time to access, correct or delete your data, using the contact details below.
If you are in the EU, UK or another region with similar laws, you also have the right to object, to restrict processing and to complain to your data protection authority.

8. Changes

We update this policy when the app's handling of data changes. The effective date at the top shows the latest version.

9. Contact

Email: amaze_apps@outlook.com
Address: Splaiul Independentei 202m, Bucharest, 060023, Romania