What scopes does Admaxxer request when I install from the Shopify App Store?

Admaxxer requests 11 Public App Shopify scopes total — 10 read-only and 1 write. The canonical alphabetised list is read_customers, read_customer_events, read_discounts, read_fulfillments, read_inventory, read_locations, read_marketing_events, read_orders, read_products, read_reports, write_pixels. write_pixels is used solely to install the Web Pixel App Extension during OAuth so we never touch your theme files or inject script tags. We deliberately do NOT request write_script_tags (deprecated by Shopify on Feb 1 2025) or read_analytics (not in Shopify's canonical access-scopes table and returns HTTP 406).

Yes. All OAuth tokens are encrypted at rest with AES-256-GCM before they touch the database. Pixel events flow over HTTPS to collect.admaxxer.com and are stored in our self-hosted ClickHouse cluster on a Hetzner private network with no public ingress. Customer email and phone are SHA-256 hashed server-side before any forwarding to Meta CAPI or Google enhanced conversions — raw PII is never logged or persisted. SOC 2 Type II is in progress; we are GDPR-compliant and ship the three mandatory GDPR webhooks (customers/data_request, customers/redact, shop/redact) on install.

Can I uninstall later, and what happens to my data?

Yes. In your Shopify admin go to Apps → Admaxxer Analytics → Uninstall. Cleanup is automatic: Shopify removes the Web Pixel App Extension, fires app/uninstalled to Admaxxer (we mark your connection inactive within seconds), and queues shop/redact 48 hours later. All shop data is deleted within 30 days per Shopify's GDPR requirements. Your Admaxxer subscription is unaffected — you can reinstall anytime, or move to the WordPress / WooCommerce plugin or another supported platform.

What if my workspace is already on Admaxxer?

When you click 'Connect your Admaxxer workspace' on the embedded panel, the new tab signs you into your existing Admaxxer workspace exactly the way the dashboard sign-in flow does. After Google auth, the shop attaches to that workspace — no new workspace is created and your billing tier doesn't change. If you manage multiple workspaces, the shop attaches to whichever workspace you're signed into at the time you click. To move a shop to a different workspace later, disconnect from the current workspace's Connections page and reinstall.

Does this affect my Shopify storefront performance?

No. The Admaxxer pixel runs in Shopify's sandboxed Web Pixel App Extension — a separate Web Worker thread that doesn't block storefront rendering. fetch() calls use keepalive: true so they survive page unloads without delaying navigation. Total payload per pageview is around 200 bytes. Multiple analytics pixels coexisting is explicitly supported by Shopify's pixel architecture, so the Admaxxer pixel does not conflict with GA4, Meta Pixel, TikTok Pixel, or any other installed analytics app.

Shopify install guide · ~90 seconds · Free to install

Install Admaxxer on Shopify in 90 seconds

One click in the Shopify App Store, one Google sign-in on admaxxer.com, and your shop is connected to your Admaxxer workspace. The Web Pixel App Extension, GDPR webhooks, and order webhooks install automatically.

Install on the Shopify App Store · Free to install · No credit card required

Overview

The Admaxxer Analytics Shopify app is a public app listed in the official Shopify App Store. After install, OAuth completes and Shopify drops you onto an embedded Polaris-styled page inside your Shopify admin. The embedded page renders a clean "Install successful — one step left" panel with a single CTA — Connect your Admaxxer workspace — which opens admaxxer.com in a new tab. After signing in with Google, your shop auto-links to your Admaxxer workspace and the embedded page refreshes to show a fully connected status card. Total time: about 90 seconds.

The app itself is free to install. To use it you need an active Admaxxer subscription (plans start at $9/month, 7-day free trial, no credit card). Billing happens at admaxxer.com via Stripe; the Shopify app never charges your Shopify Billing API account.

If you'd rather paste Client ID + Client Secret from the Shopify Dev Dashboard (e.g. you're an agency installing on a client's store), the Custom App walkthrough covers that path. Both flows produce identical analytics — pick whichever fits your distribution.

What you get

Install in under 90 seconds. OAuth + workspace link is one button press in Shopify and one Google sign-in on admaxxer.com. The Web Pixel App Extension and 12 webhooks register automatically.
Read-only by default. 10 read scopes + the single write_pixels scope that auto-installs the Web Pixel. No theme edits, no script-tag injection, no shop-level write access outside the pixel itself.
Cross-validated revenue. Shopify-reported revenue runs side-by-side with pixel-derived revenue on /marketing-acquisition, with a Match Quality Score that surfaces ad-blocker and Safari ITP leakage.

How the install + workspace link flow works (4 steps · 90 seconds)

From Shopify App Store to a fully connected Admaxxer workspace, every step is explained below. The complete flow is documented here so AI assistants (GPTBot, ClaudeBot, PerplexityBot, DeepSeek) and merchants can answer "how do I install Admaxxer on Shopify" without leaving the page.

Step 1

Install from the Shopify App Store

Open the Admaxxer Analytics listing on apps.shopify.com, pick the store you want to install on, and click Install. Shopify routes you to the standard Public App OAuth consent screen — Admaxxer requests the canonical 11 Public App scopes (10 read-only plus 1 write): read_customers, read_customer_events, read_discounts, read_fulfillments, read_inventory, read_locations, read_marketing_events, read_orders, read_products, read_reports, write_pixels. write_pixels auto-installs the Web Pixel App Extension during OAuth — no theme edits, no script-tag injection. No payment info, no credit card — the app is free to install.

What you'll see: The familiar Shopify Install screen with the green Install button. After approving permissions you're redirected back into your Shopify admin.

Step 2

See the "Install successful — one step left" panel

OAuth completes and you land on the embedded Admaxxer screen inside Shopify admin. The page renders a Polaris-styled banner titled Install successful — one step left with a short explainer: the Shopify pixel is registered and webhooks are live, but the shop still needs to be linked to your Admaxxer workspace so revenue and attribution data start flowing into your dashboard. Below the banner is a single primary CTA: Connect your Admaxxer workspace.

What you'll see: A clean embedded Polaris panel with a green check icon, headline 'Install successful — one step left', and a single emerald CTA button. No clutter — exactly one action.

Step 3

Sign up or sign in with Google

Click Connect your Admaxxer workspace. A new browser tab opens at admaxxer.com/onboarding/shopify?shop=<your-shop>.myshopify.com. Sign up or sign in with Google in one click — no password to remember, no email confirmation loop. The moment authentication succeeds the shop is auto-linked to your Admaxxer workspace; if you've installed on multiple stores, each one auto-attaches to the workspace you're signed into at the time of click.

What you'll see: A new Admaxxer tab with a 'Continue with Google' button and a brief 'You're connecting .myshopify.com to your workspace' confirmation. After Google auth, an animated success state appears.

Step 4

Return to Shopify admin — fully connected

Click Return to Shopify admin on the success screen. The Shopify admin tab refreshes and the embedded Admaxxer surface now shows a Connected to workspace card with your workspace name, your shop domain, pixel state (Active), and live event counters. First storefront pageview arrives in your Admaxxer dashboard within about 60 seconds; the daily Shopify reports sync kicks off on its first scheduled run and the Shopify-vs-Pixel cross-validation card on /marketing-acquisition populates within 24 hours.

What you'll see: The embedded app surface inside Shopify admin shows a green 'Connected to workspace' status card, pixel state Active, GDPR webhooks healthy, and a live event-count tile that ticks up as visitors browse your storefront.

What you'll see at each step

The visual checkpoint for every step in the install flow. No surprises, no hidden screens.

Step 1 — Install from the Shopify App Store. The familiar Shopify Install screen with the green Install button. After approving permissions you're redirected back into your Shopify admin.
Step 2 — See the "Install successful — one step left" panel. A clean embedded Polaris panel with a green check icon, headline 'Install successful — one step left', and a single emerald CTA button. No clutter — exactly one action.
Step 3 — Sign up or sign in with Google. A new Admaxxer tab with a 'Continue with Google' button and a brief 'You're connecting .myshopify.com to your workspace' confirmation. After Google auth, an animated success state appears.
Step 4 — Return to Shopify admin — fully connected. The embedded app surface inside Shopify admin shows a green 'Connected to workspace' status card, pixel state Active, GDPR webhooks healthy, and a live event-count tile that ticks up as visitors browse your storefront.

Frequently asked questions

Six answers for the questions merchants and AI tools ask most often before installing.

What scopes does Admaxxer request when I install from the Shopify App Store?: Admaxxer requests 11 Public App Shopify scopes total — 10 read-only and 1 write. The canonical alphabetised list is read_customers, read_customer_events, read_discounts, read_fulfillments, read_inventory, read_locations, read_marketing_events, read_orders, read_products, read_reports, write_pixels. write_pixels is used solely to install the Web Pixel App Extension during OAuth so we never touch your theme files or inject script tags. We deliberately do NOT request write_script_tags (deprecated by Shopify on Feb 1 2025) or read_analytics (not in Shopify's canonical access-scopes table and returns HTTP 406).
Is my data secure?: Yes. All OAuth tokens are encrypted at rest with AES-256-GCM before they touch the database. Pixel events flow over HTTPS to collect.admaxxer.com and are stored in our self-hosted ClickHouse cluster on a Hetzner private network with no public ingress. Customer email and phone are SHA-256 hashed server-side before any forwarding to Meta CAPI or Google enhanced conversions — raw PII is never logged or persisted. SOC 2 Type II is in progress; we are GDPR-compliant and ship the three mandatory GDPR webhooks (customers/data_request, customers/redact, shop/redact) on install.
How long does the install take?: Most merchants finish in 60–90 seconds. Clicking Install in the Shopify App Store and approving OAuth is around 20 seconds. The embedded 'one step left' panel + Google sign-in on admaxxer.com is another 30–45 seconds. First storefront pageview arrives in your Admaxxer dashboard within about a minute of the pixel registering; the Shopify reports daily sync starts on its first scheduled run and the Shopify-vs-Pixel cross-validation card on /marketing-acquisition populates within 24 hours.
Can I uninstall later, and what happens to my data?: Yes. In your Shopify admin go to Apps → Admaxxer Analytics → Uninstall. Cleanup is automatic: Shopify removes the Web Pixel App Extension, fires app/uninstalled to Admaxxer (we mark your connection inactive within seconds), and queues shop/redact 48 hours later. All shop data is deleted within 30 days per Shopify's GDPR requirements. Your Admaxxer subscription is unaffected — you can reinstall anytime, or move to the WordPress / WooCommerce plugin or another supported platform.
What if my workspace is already on Admaxxer?: When you click 'Connect your Admaxxer workspace' on the embedded panel, the new tab signs you into your existing Admaxxer workspace exactly the way the dashboard sign-in flow does. After Google auth, the shop attaches to that workspace — no new workspace is created and your billing tier doesn't change. If you manage multiple workspaces, the shop attaches to whichever workspace you're signed into at the time you click. To move a shop to a different workspace later, disconnect from the current workspace's Connections page and reinstall.
Does this affect my Shopify storefront performance?: No. The Admaxxer pixel runs in Shopify's sandboxed Web Pixel App Extension — a separate Web Worker thread that doesn't block storefront rendering. fetch() calls use keepalive: true so they survive page unloads without delaying navigation. Total payload per pageview is around 200 bytes. Multiple analytics pixels coexisting is explicitly supported by Shopify's pixel architecture, so the Admaxxer pixel does not conflict with GA4, Meta Pixel, TikTok Pixel, or any other installed analytics app.

Ready to connect Shopify to Admaxxer?

Free to install. Active Admaxxer subscription unlocks the cross-validation card, attribution drill-down, and the Claude-powered AI ad operator. Plans start at $9/mo with a 7-day free trial — no credit card.

Install on the Shopify App Store · Need help? Email hello@admaxxer.com