Privacy Policy
This Privacy Policy explains how the Shopify Theme Detector website (themedetectorapp.com) and the Shopify Theme Detector browser extension ("the Service") collect, use, and protect your information. The Service is operated by MiracleWebSoft.
1. What we collect
Each time you analyze a store, we record:
- The URL you submitted for analysis (e.g.
https://example.com) - The analysis results we derived from public pages of that URL: Shopify detection status, theme name, installed apps, product count, collection count, store info visible in the page's HTML, and a computed store health score
- Your IP address, used to enforce per-IP rate limits and to record the country of origin for aggregate analytics
- Approximate country, derived from your IP via the third-party service ip-api.com
- Timestamp of the analysis
- Source — whether the request came from the website or the browser extension
We do not collect: your name, email, Google account, browsing history outside of the URLs you explicitly submit, cookies for tracking purposes, or any data from other tabs you have open.
2. Browser extension permissions
The Chrome extension requests two permissions:
activeTab— so the popup can read the URL of the tab you are currently viewing and pre-fill it in the input. This permission grants access only to the active tab at the moment you open the popup, and only while the popup is open.host_permissionsforhttps://themedetectorapp.com/*— so the popup can send the URL to our analysis API and receive results.
The extension does not read page content, track your browsing, or transmit any data other than the URL you choose to analyze.
3. How we use the data
- To run the analysis you requested and return the results
- To cache recent results (up to 6 hours) so repeat lookups are faster
- To enforce rate limits (a fixed number of analyses per IP per hour), preventing abuse
- To show aggregate statistics in our internal admin panel (e.g. totals by country) — individual records are not shared publicly
4. Data retention
Submission records are stored on our server for as long as the Service is operated. You may request deletion of records associated with a specific URL or IP address by emailing us at the contact below.
5. Sharing and third parties
We do not sell or rent your data. We share data only with:
- ip-api.com — your IP is sent to resolve an approximate country (their privacy policy)
- Our hosting provider, solely for the purpose of running the Service
- Law enforcement, if required by a valid legal order
The URLs you submit are public-facing store URLs — we fetch their public HTML only. We do not access any private, password-protected, or logged-in pages.
6. Security
Data is transmitted over HTTPS. The admin panel is protected by a password and HMAC-signed tokens. We follow reasonable industry practices to keep our server patched and access restricted.
7. Children
The Service is not directed at children under 13 and we do not knowingly collect data from them.
8. Changes to this policy
We may update this policy from time to time. Material changes will be indicated by updating the "Last updated" date at the top.
9. Contact
Questions, deletion requests, or concerns? Email karam@miraclewebsoft.com.