EcomLoop Pixel & Tracking Checker: privacy
The extension watches which tracking tags a store sends while you browse it, and checks them in your browser. What it records stays in your browser. It sends something to us only when you press "Run full scan", and then only the store's address.
Last updated 26 October 2026.
Nothing until you ask
Installed and not clicked, the extension records nothing. It starts on one tab when you open it on a store and press "Check this store", and Chrome asks you first whether it may read that site. It stops when you press "Stop" or close the tab.
What it records, and where
While a tab is being checked, the extension keeps:
- the requests that tab makes to known tracking and analytics services, and to the store's own site where a tag is served from it, including what those requests carry. That is whatever the store's tags send: page addresses, product IDs and prices, event names, and on some stores data about you as a shopper, such as a hashed email address, once you type it at checkout.
- for each page you visit there, the store's tracking settings as the page exposes them, its script tags, its product structured data, and the page's HTML source, read again from the store so tags added after load can be told apart from ones in the theme.
All of it stays in this browser, in Chrome's session storage for the extension. It is erased when you press "Stop", close the tab, or quit Chrome, and it is never sent anywhere. The findings and the fix ticket are worked out in your browser from it.
The extension does not listen to other tabs at all. If you leave the store in the tab being checked, nothing from the other site is kept: its requests are dropped within seconds without being stored, and recording picks up again when you come back to the store. A store's checkout on Shopify's own domain counts as the store.
When you press "Run full scan"
The extension asks our scanner at scan.ecomloop.com to scan the store. It sends the store's address, and, if you have used the free scans for the day and type one in, your email address. Nothing it recorded in your browser is sent. Our server then loads the store's public pages itself.
The scanner treats this the same as a scan from our website:
- The report is kept for 30 days behind an unguessable link, then deleted.
- We keep a record of each scan: the store's address, a salted hash of your IP address (not the address itself), the email if you gave one, your browser's user-agent string, what the scan found, and that it came from the extension. We use it to apply the daily scan limit, to count how many stores share a problem, and, if you gave an email, to follow up. This record has no expiry.
- The email you type is remembered in this browser, so the next scan does not ask again. Removing the extension removes it.
When you open a report, it opens on scan.ecomloop.com like any web page, and that page loads our Google Ads and X tags, which we use to measure our own advertising.
What the extension never does
- No analytics, advertising or tracking of its own.
- Nothing sold or shared, and nothing used for anything but the check you asked for.
- No code loaded from anywhere: everything it runs ships inside the extension.
Why it asks for each permission
| Permission | What it is used for |
|---|---|
| The store you check | Asked for when you press "Check this store", one site at a time, so the extension can see that site's requests and read its pages. |
| Tracking services' sites | Google, Meta, TikTok, Pinterest, Snap, Microsoft and the other services in the list Chrome shows at install, so the requests a store's tags send to them can be seen. Only requests from a tab being checked are kept. |
webRequest | Seeing those requests and what they carry. |
webNavigation | Knowing which page, and which frame on it, a request came from. |
scripting | Reading the tracking settings and script tags of a page on the store being checked. |
storage | Keeping the recording for the length of the check, the email you typed, and whether it has already asked you for a review. |
activeTab | Knowing which store the open tab is on when you click the extension. |
Questions, or a request to delete
Email scanner@ecomloop.com. To have the scan records tied to your email deleted, write from that address.