What scopes does Admaxxer Analytics request when I install from the Shopify App Store?

Admaxxer requests 11 Public App Shopify scopes total — 10 read-only and 1 write. The canonical alphabetised list is read_customers, read_customer_events, read_discounts, read_fulfillments, read_inventory, read_locations, read_marketing_events, read_orders, read_products, read_reports, write_pixels. write_pixels is used solely to install the Web Pixel App Extension during OAuth so we never touch your theme files or inject script tags. We deliberately do NOT request write_script_tags (deprecated by Shopify on Feb 1, 2025) or read_analytics (not in Shopify's canonical access-scopes table — returns HTTP 406).

Yes. All OAuth tokens are encrypted at rest with AES-256-GCM before they touch the database. Pixel events flow over HTTPS to collect.admaxxer.com and are stored in our self-hosted analytics cluster on a private network with no public ingress. Customer email and phone are SHA-256 hashed server-side before any forwarding to Meta CAPI or Google enhanced conversions — raw PII is never logged or persisted at rest. We ship the three mandatory GDPR webhooks on install, and shop/redact deletes all your shop data within 30 days of uninstall.

How long does the install take?

Most merchants finish in 60–90 seconds. Clicking Add app in the Shopify App Store and approving OAuth is around 20 seconds. The embedded "one step left" panel + Google sign-in on admaxxer.com is another 30–45 seconds. First storefront pageview arrives in your Admaxxer dashboard within about a minute of the pixel registering.

Does this affect my Shopify storefront performance?

No. The Admaxxer pixel runs in Shopify's sandboxed Web Pixel App Extension — a separate Web Worker thread that doesn't block storefront rendering. fetch() calls use keepalive: true so they survive page unloads without delaying navigation. Total payload per pageview is around 200 bytes. Multiple analytics pixels coexisting is explicitly supported by Shopify's pixel architecture, so the Admaxxer pixel does not conflict with GA4, Meta Pixel, TikTok Pixel, Klaviyo, or any other installed analytics app.

What if I already have an Admaxxer workspace?

When you click "Connect your Admaxxer workspace" on the embedded panel, the new tab signs you into your existing Admaxxer workspace exactly the way the dashboard sign-in flow does. After Google sign-in, the shop attaches to that workspace — no new workspace is created and your billing tier doesn't change. If you manage multiple workspaces, the shop attaches to whichever workspace you're signed into at the time you click.

Can I uninstall later, and what happens to my data?

Yes. In your Shopify admin go to Apps > Admaxxer Analytics > Uninstall. Cleanup is automatic: Shopify removes the Web Pixel App Extension, fires app/uninstalled to Admaxxer (we mark your connection inactive within seconds), and queues shop/redact 48 hours later. All shop data is deleted within 30 days per Shopify's GDPR requirements. Your Admaxxer subscription is unaffected — you can reinstall anytime.

The embedded page hangs on "Checking your connection..." for more than 10 seconds

Refresh the iframe by clicking the Admaxxer app entry in your Shopify admin sidebar again. The embedded page has a hard 6-second ceiling on the loading state and automatically transitions to an actionable view if anything blocks the connection lookup. If it still persists, open the dashboard directly at https://admaxxer.com/dashboard — your Shopify store is fully connected regardless of whether the embedded admin surface renders. This can happen when your browser enforces strict third-party iframe restrictions (Safari ITP, Brave Shields, or some enterprise Chrome policies); opening the dashboard at admaxxer.com instead reliably works around it.

Buttons are unresponsive after install

The embedded admin surface uses Shopify App Bridge for navigation; if App Bridge fails to initialize, buttons fall back to standard top-level navigation. If they're completely unresponsive, disable any aggressive ad-blocker / privacy extension for shopify.com and admaxxer.com, re-enable third-party cookies for shopify.com, and refresh. Or open the dashboard directly at admaxxer.com/dashboard — every embedded action has an equivalent admaxxer.com surface.

Workspace not found / I can't sign in

The "Connect your Admaxxer workspace" CTA opens admaxxer.com/onboarding/shopify?shop= .myshopify.com. If sign-in fails, common causes are using the wrong Google account (personal vs Workspace), ad-blocker stripping the OAuth callback, or third-party cookies disabled. Fix by clearing cookies for google.com and admaxxer.com, disabling aggressive extensions, then retrying. Or sign in with email magic link at admaxxer.com/auth/signin.

Pixel events aren't flowing yet

Wait 15 minutes — first-event latency is usually under 60 seconds but Shopify's Web Pixel registration can take a few minutes to propagate to all edge nodes. Check the embedded Admaxxer screen for Pixel: Active, then open your storefront in incognito and check DevTools Network for a POST to collect.admaxxer.com on every page load. If 24 hours pass on an actively-ordering store with no admin webhook events, place a $1 Bogus Gateway test order or email hello@admaxxer.com with your shop domain.

Install guide · Shopify · ~60 seconds · Updated May 22, 2026 · By Admaxxer Team

Install Admaxxer Analytics from Shopify App Store

3 clicks, ~60 seconds — Admaxxer is tracking revenue from your store. The Web Pixel App Extension, GDPR webhooks, and order webhooks install automatically. Free to install. No credit card required.

Overview

Admaxxer Analytics is an AI-native marketing analytics + attribution platform — think Triple Whale + Datafast in one surface. The Shopify App Store install gives your store a unified dashboard with blended ROAS, MER, cohort LTV, new vs returning customer revenue, source-and-attribution drill-down across Shopify + your pixel + every connected ad platform (Meta, Google, TikTok, Pinterest, Amazon), a Shopify-vs-Pixel cross-validation card with a Match Quality Score that surfaces ad-blocker / Safari ITP / CSP leakage, and an in-app AI agent (Claude) you can ask "what's driving my revenue this week?" in plain English.

The app is free to install. You'll need an active Admaxxer subscription (plans start at $9/mo with a 7-day free trial) to use it, billed at admaxxer.com via Stripe — the Shopify app never charges through Shopify Billing API.

Two Shopify distribution paths are available; this page documents the recommended one:

Shopify App Store (this guide) — one-click install via the public listing at apps.shopify.com/admaxxer. 11 scopes (10 read-only + 1 write). Web Pixel App Extension auto-registers during OAuth.
Custom App (alternative) — paste Client ID + Client Secret from the Shopify Dev Dashboard. Useful when you can't or don't want to install via the App Store (e.g., agencies setting up multiple test stores). See /documentation/install/shopify for the walkthrough.

Before you start

An active Shopify store on any plan tier (Basic, Shopify, Advanced, or Plus).
An Admaxxer account — sign up free at admaxxer.com (7-day trial, no credit card required). New accounts can also be created during step 3 below if you don't have one yet.
About 60 seconds. Most of the work is automatic; you just click Add app, approve permissions, and sign in.

Install in 4 clicks

Find Admaxxer Analytics on the Shopify App Store. Open apps.shopify.com/admaxxer directly, or search "Admaxxer" from your Shopify admin Apps page. Click Add app. If you manage multiple stores, Shopify prompts you to pick the one to install on.
Approve the permissions. Shopify routes you to the standard Public App OAuth consent screen. Admaxxer requests the canonical 11 Public App scopes (10 read-only + 1 write): read_customers, read_customer_events, read_discounts, read_fulfillments, read_inventory, read_locations, read_marketing_events, read_orders, read_products, read_reports, write_pixels. Every scope has a clear, narrow purpose — see the Permissions section below for one-line rationales. Click Install app to grant. The Web Pixel App Extension auto-registers during OAuth, so there's no theme edit, no script-tag injection, no second install step.
Connect your Admaxxer workspace. OAuth completes and you land on the embedded Admaxxer screen inside Shopify admin. The page shows a Polaris-styled banner titled Install successful — one step left: the pixel and webhooks are live on Shopify's side, but your shop still needs to be linked to your Admaxxer workspace. Click Connect your Admaxxer workspace. A new browser tab opens at admaxxer.com/onboarding/shopify?shop=<your-shop>.myshopify.com. Sign in with Google in one click (or with an email magic link if Google isn't your work account). The shop auto-attaches to whichever workspace you're signed into.
Return to Shopify admin — your store is now connected. Click Return to Shopify admin on the Admaxxer success screen. The Shopify admin tab refreshes and the embedded Admaxxer surface now shows a Connected to workspace card with your workspace name, shop domain, pixel state (Active), and live event counters. First storefront pageview arrives in your Admaxxer dashboard within about 60 seconds; the daily Shopify reports sync kicks off on its first scheduled run; the Shopify-vs-Pixel cross-validation card on /marketing-acquisition populates within 24 hours.

Permissions Admaxxer requests

Admaxxer requests exactly what's needed to power the dashboard and the Shopify-vs-Pixel cross-validation card — no more. 10 of 11 scopes are read-only. Only write_pixels is a write scope and it's used solely to install the Web Pixel App Extension during OAuth (it's the modern replacement for the deprecated write_script_tags, which Shopify blocked for new apps on February 1, 2025). We deliberately do NOT request read_analytics (not in Shopify's canonical access-scopes table; returns HTTP 406).

read_customers read-only
Cohort LTV, new vs returning customer split, customer-level views.
read_customer_events read-only
Required alongside write_pixels for Shopify's webPixelCreate mutation on BOTH Custom Apps and Public Apps (GL#454, 2026-05-12 — earlier theory that this was Public-App-only turned out to be wrong); without it, the Web Pixel App Extension can't subscribe to checkout_completed (ACCESS_DENIED at install with the literal error 'Required: write_pixels access scope. Also: The app requires read_customer_events access scope and user access permission').
read_discounts read-only
Promo-code attribution + discount-driven revenue breakdown on /marketing-acquisition. Powers the discount_code group_by in revenue analytics (server/ads/tools/queryMetricsPipeSchemas.ts) and lets the AI agent answer 'which discount codes drove the most revenue last month?'.
read_fulfillments read-only
Refunds + fulfillment timing for true Net Revenue (without it, ROAS inflates 8-15%).
read_inventory read-only
Gross-margin / contribution-margin tile (Shopify Plus stores).
read_locations read-only
Multi-warehouse + EU/US split for Plus stores; required even for single-location.
read_marketing_events read-only
Shopify-tagged campaigns alongside Meta + Google in Marketing Acquisition.
read_orders read-only
Revenue + line items powering MER, P&L, and Marketing Acquisition.
read_products read-only
Product titles for the creative grid, cohort views, and LTV-by-product.
read_reports read-only
Shopify-reported revenue compare column + Match Quality Score on /marketing-acquisition.
write_pixels write
Lets Admaxxer install the Web Pixel App Extension that captures checkout_completed from your storefront. Without it, Admaxxer can't see your checkouts — only pageviews.

Source of truth: ADMAXXER_PUBLIC_APP_SHOPIFY_SCOPES in shared/shopify-scopes.ts. Verified against Shopify's canonical access-scopes table.

What gets installed

One install action triggers four pieces of integration. You don't have to configure any of them — everything happens behind the OAuth handshake.

Web Pixel App Extension (auto) — A sandboxed web worker subscribes to Shopify's standard customer events (page_viewed, product_viewed, collection_viewed, product_added_to_cart, cart_viewed, checkout_started, payment_info_submitted, checkout_completed). Every event POSTs to collect.admaxxer.com/v1/shopify/collect over CORS, signed with a per-shop HMAC. Privacy categories declared: analytics + marketing, so the pixel honors Shopify's consent banner in GDPR regions.
Daily Shopify reports sync (auto) — A worker runs once per day, calls Shopify's reports API under read_reports, and pushes the merchant's server-side daily totals (orders, gross sales, refunds, taxes, discounts, shipping, units sold) into Admaxxer's analytics store. The cross-validation card on /marketing-acquisition reads from this data alongside pixel-derived metrics.
GDPR webhooks (3, auto) — Shopify mandates these for every public app: customers/data_request (fulfills GDPR data-export requests), customers/redact (deletes a specific customer's data within 30 days), and shop/redact (deletes all shop data when you uninstall, within 30 days). All three respond 2xx within milliseconds and queue the actual data work asynchronously, per Shopify's reliability requirements.
Admin webhooks (9, auto) — Server-side enrichment that attribution and freshness depend on: orders/create, orders/paid, orders/updated, orders/cancelled, refunds/create, fulfillments/create, products/update, customers/create, customers/update. Each webhook is HMAC-signed by Shopify and verified by Admaxxer before persistence.

Cross-validated revenue

Pixel data has known gaps — ad-blockers, Safari ITP, CSP errors, and JavaScript disabled all silently drop events. Shopify's server-side data via read_reports is ground truth. Admaxxer pulls both into its analytics store daily and shows them side-by-side on /marketing-acquisition with a delta % and a Match Quality Score (0-100). A 95+ score means your pixel is healthy; below 80 means measurable revenue is leaking to ad-blockers, ITP, or CSP — and the card surfaces which sources / pages are leaking the most. This is our cross-validation differentiator: we don't just collect events, we tell you when they're missing.

Troubleshooting

The embedded page hangs on "Checking your connection..." for more than 10 seconds.: Refresh the iframe by clicking the Admaxxer app entry in your Shopify admin sidebar again. The embedded page has a hard 6-second ceiling on the loading state (post-GL#563 fix) and automatically transitions to an actionable view if anything blocks the connection lookup, so a persistent spinner usually means the page has been left open on a stale tab. If it still persists, open the dashboard directly at admaxxer.com/dashboard — your Shopify store is fully connected regardless of whether the embedded admin surface renders. This can happen when your browser enforces strict third-party iframe restrictions (Safari ITP, Brave Shields, or some enterprise Chrome policies); opening the dashboard at admaxxer.com instead of inside Shopify admin reliably works around it.
Buttons are unresponsive after install.: The embedded admin surface uses Shopify App Bridge for navigation. If App Bridge fails to initialize (rare, but happens when a browser extension blocks the shopify.com origin or third-party cookies are fully disabled), buttons fall back to standard top-level navigation. If they're completely unresponsive, disable any aggressive ad-blocker / privacy extension for shopify.com and admaxxer.com, re-enable third-party cookies for shopify.com in your browser settings, then refresh the Shopify admin tab. If the issue persists, open the dashboard directly at admaxxer.com/dashboard — every embedded action has an equivalent admaxxer.com surface, so the install is never blocked by an iframe issue.
Workspace not found / I can't sign in.: The "Connect your Admaxxer workspace" CTA opens admaxxer.com/onboarding/shopify?shop=<your-shop>.myshopify.com in a new tab. If sign-in fails, the most common causes are (a) using the wrong Google account (you signed in with a personal Gmail when your Admaxxer workspace is on a Google Workspace account, or vice-versa), (b) ad-blocker stripping the OAuth callback, or (c) third-party cookies disabled for google.com. Fix: clear cookies for google.com and admaxxer.com, disable any aggressive extension for those domains, then retry. Or sign in with email magic link instead — visit admaxxer.com/auth/signin directly, enter your email, click the magic link, and the shop attaches once you're authenticated. If you're brand new to Admaxxer, a workspace is auto-created on first sign-in and the shop attaches to it immediately.
Pixel events aren't flowing yet.: Wait the full 15 minutes — first-event latency is usually under 60 seconds, but Shopify's Web Pixel registration can take a few minutes to propagate to all storefront edge nodes after install. After 15 minutes, check the embedded Admaxxer screen inside Shopify: if it shows Pixel: Active, open your storefront in incognito and check DevTools › Network for a POST to collect.admaxxer.com on every page load. If you see the request but no event in Admaxxer, your shop domain may not be linked to a workspace yet — click Connect your Admaxxer workspace in the embedded app. If 24 hours pass and admin webhooks are still showing "Awaiting first event" on an actively-ordering store, place a $1 Shopify Bogus Gateway test order to force the order webhook fire, or email hello@admaxxer.com with your shop domain.
How do I uninstall Admaxxer Analytics?: In your Shopify admin go to Apps › Admaxxer Analytics › Uninstall. Cleanup is automatic: Shopify removes the Web Pixel App Extension, fires app/uninstalled to Admaxxer (we mark your connection inactive within seconds), and queues shop/redact 48 hours later. All shop data is deleted within 30 days per Shopify's GDPR requirements. Your Admaxxer subscription is unaffected — you can reinstall anytime from the App Store, or move to the WordPress / WooCommerce plugin or another supported platform. Email hello@admaxxer.com or visit your Billing settings to cancel the subscription itself.
Does this affect my Shopify storefront performance?: No. The Admaxxer pixel runs in Shopify's sandboxed Web Pixel App Extension — a separate Web Worker thread that doesn't block storefront rendering. fetch() calls use keepalive: true so they survive page unloads without delaying navigation. Total payload per pageview is around 200 bytes. Multiple analytics pixels coexisting is explicitly supported by Shopify's pixel architecture, so the Admaxxer pixel does not conflict with GA4, Meta Pixel, TikTok Pixel, Klaviyo, or any other installed analytics app.
Is my data secure?: Yes. All OAuth tokens are encrypted at rest with AES-256-GCM before they touch the database. Pixel events flow over HTTPS to collect.admaxxer.com and are stored in our self-hosted analytics cluster on a private network with no public ingress. Customer email and phone are SHA-256 hashed server-side before any forwarding to Meta CAPI or Google enhanced conversions — raw PII is never logged or persisted at rest. We ship the three mandatory GDPR webhooks on install, and shop/redact deletes all your shop data within 30 days of uninstall. See /privacy for the full retention policy.
What does Admaxxer Analytics actually do?: Admaxxer is an AI-native marketing analytics + attribution platform — think Triple Whale + Datafast in one surface. Once your Shopify store is connected, you get a unified dashboard with blended ROAS, MER, cohort LTV, new vs returning customer revenue, source-and-attribution drill-down across Shopify + your pixel + every connected ad platform (Meta, Google, TikTok, Pinterest, Amazon), a Shopify-vs-Pixel cross-validation card with a Match Quality Score that surfaces ad-blocker / ITP / CSP leakage, and an in-app AI agent (Claude) you can ask "what's driving my revenue this week?" in plain English. The Shopify connection is the foundation — your first-party order + customer + product data is what every downstream metric joins against.

Pricing

The Admaxxer Analytics Shopify app is free to install. An active Admaxxer subscription is required to use it; plans start at $9/mo (Ad Starter, 15K tracked events) and scale to $999/mo (Ad Platform, 50M events). All tiers include unlimited ad-platform connections, unlimited team seats, and unlimited chat messages — plans differentiate only on tracked-event quota. Billing is handled by Stripe at admaxxer.com — the Shopify app never charges through the Shopify Billing API. See admaxxer.com/pricing for the full plan matrix. You can install on multiple stores under one Admaxxer subscription (each store counts toward your tracked-events quota).