Privacy
Tracking Witness, by iTechVista · last updated 20 October 2026 · Deutsch
Tracking Witness checks whether the cookie banner a Shopify store already has really stops tracking until the shopper agrees. It does this by visiting the store’s public pages like an ordinary browser. It does not need to know anything about the store’s customers, and it does not ask.
What is stored
- Your shop domain and storefront address, the shop name and contact email Shopify reports, the language for reports, your plan, and when the app was installed.
- The email address for alerts, if you enter a different one, and whether alerts are on.
- The results of each check: the date, where it ran from, which trackers sent requests and when, the request addresses and consent values behind each finding, cookies and storage set during our own test visits, and screenshots of your public storefront pages and banner.
- An access token Shopify issues so the app can read your theme. It expires and is refreshed automatically.
- Only if you enter it: your storefront password, so the app can check a store that is not open yet. It is stored encrypted and used only to open your own storefront for the check. You can remove it in Settings.
What is never stored
Customer records, order data and payment information. The test visits are made by our own browser with no account, so the identifiers trackers create during a check belong to that test visit, not to a real shopper.
What the app changes on your store
Nothing. It reads your public pages and your theme files and never writes to your store.
Who else sees it
Nobody else. Data is not sold, rented or shared with advertisers or analytics providers. It is used only to produce your own results, alerts and evidence files. These services process it for us:
- Supabase: the database and file storage, in the EU (Ireland).
- Amazon Web Services: the scanner that visits your store from the EU, in Frankfurt, Germany, and the app itself.
- A computer we operate in the United States, for the US check with Global Privacy Control (Evidence plan).
- Resend: delivery of alert emails (United States).
- Shopify: installation, login and billing.
How long it is kept, and deleting it
Results are kept while the app is installed; your plan decides how far back the app shows them. Uninstalling stops all checks at once. 48 hours later Shopify sends a deletion request, and everything listed above is then erased, screenshots included. You can also ask for deletion at any time at the address below.
Emails
On plans with alerts, the app emails the shop’s contact address (or the one you set) when a check finds something new. Every email has a one-click link to stop them, and alerts can be turned off in Settings.
Changes
If this policy changes in a way that affects what is collected, the change will be dated here.