Privacy Policy

Last updated: April 23, 2026

This Privacy Policy explains how the Shopify Theme Detector website (themedetectorapp.com) and the Shopify Theme Detector browser extension ("the Service") collect, use, and protect your information. The Service is operated by MiracleWebSoft.

1. What we collect

Each time you analyze a store, we record:

The URL you submitted for analysis (e.g. https://example.com)
The analysis results we derived from public pages of that URL: Shopify detection status, theme name, installed apps, product count, collection count, store info visible in the page's HTML, and a computed store health score
Your IP address, used to enforce per-IP rate limits and to record the country of origin for aggregate analytics
Approximate country, derived from your IP via the third-party service ip-api.com
Timestamp of the analysis
Source — whether the request came from the website or the browser extension

We do not collect: your name, email, Google account, browsing history outside of the URLs you explicitly submit, cookies for tracking purposes, or any data from other tabs you have open.

2. Browser extension permissions

The Chrome extension requests two permissions:

activeTab — so the popup can read the URL of the tab you are currently viewing and pre-fill it in the input. This permission grants access only to the active tab at the moment you open the popup, and only while the popup is open.
host_permissions for https://themedetectorapp.com/* — so the popup can send the URL to our analysis API and receive results.

The extension does not read page content, track your browsing, or transmit any data other than the URL you choose to analyze.

3. How we use the data

To run the analysis you requested and return the results
To cache recent results (up to 6 hours) so repeat lookups are faster
To enforce rate limits (a fixed number of analyses per IP per hour), preventing abuse
To show aggregate statistics in our internal admin panel (e.g. totals by country) — individual records are not shared publicly

4. Data retention

Submission records are stored on our server for as long as the Service is operated. You may request deletion of records associated with a specific URL or IP address by emailing us at the contact below.

5. Sharing and third parties

We do not sell or rent your data. We share data only with:

ip-api.com — your IP is sent to resolve an approximate country (their privacy policy)
Our hosting provider, solely for the purpose of running the Service
Law enforcement, if required by a valid legal order

The URLs you submit are public-facing store URLs — we fetch their public HTML only. We do not access any private, password-protected, or logged-in pages.

6. Security

Data is transmitted over HTTPS. The admin panel is protected by a password and HMAC-signed tokens. We follow reasonable industry practices to keep our server patched and access restricted.

7. Children

The Service is not directed at children under 13 and we do not knowingly collect data from them.

8. Changes to this policy

We may update this policy from time to time. Material changes will be indicated by updating the "Last updated" date at the top.

9. Contact

Questions, deletion requests, or concerns? Email karam@miraclewebsoft.com.