Privacy Policy

StoreSpy — Last updated: April 27, 2026

Overview

Data We Collect

For Free users, StoreSpy collects nothing. Zero network calls are made to our servers during store analysis.

For Pro users, the absolute minimum data required for license verification:

• License Key: When you activate a paid license, your license key is sent to our verification server (license-worker.hellopipichong.workers.dev) to validate your subscription status. This is the only network call StoreSpy makes related to your account.
• Email Address: The email associated with your Stripe checkout, used solely for license management and support.

Data We Do NOT Collect

• We do not collect your browsing history or browsing activity.
• We do not collect or transmit any data from the Shopify stores you analyze — store names, themes, apps, products, or URLs all stay in your browser.
• We do not use any analytics or tracking inside the extension (no Google Analytics, no telemetry).
• We do not collect any personally identifiable information beyond what is listed above.
• We do not sell, rent, or share any user data with third parties.

Data Storage

All analysis results and the 24-hour cache are stored locally on your device using browser-native storage:

• chrome.storage.local for the 24-hour per-domain cache, daily quota counter, license state, and your preferences.

This data never leaves your browser. You can clear it at any time by removing the extension or clearing extension data in your browser settings.

License Verification

When you enter a license key, the extension sends a request to license-worker.hellopipichong.workers.dev/verify containing only:

• Your license key
• The product identifier (storespy)

No browsing data, store data, or other personal information is included. Pro Monthly licenses re-verify silently every 7 days; Lifetime licenses verify once at activation.

Third-Party Services

• Stripe processes payments for paid plans. Payment information is handled entirely by Stripe and is never stored on our servers. See Stripe's Privacy Policy.

Permissions

StoreSpy requests only three permissions, the minimum needed to operate:

• storage: To save the 24-hour cache, daily quota, and license state locally.
• activeTab: To read the currently focused Shopify store page when you click the extension icon.
• scripting: To run the local fingerprint detection inside the active tab.

StoreSpy does not request host_permissions, webRequest, or cookies permissions.

Changes to This Policy

We may update this privacy policy from time to time. Any changes will be posted on this page with an updated revision date. Continued use of the extension after changes constitutes acceptance of the updated policy.

Contact Us

If you have questions or concerns about this privacy policy, please contact us:

• Email: support@extpilot.com
• Website: extpilot.com