Privacy Policy

Who we are

PixelSentry is a monitoring service for Meta pixel and Conversions API health on Shopify stores, operated by Orion Apex Capital. Questions about this policy or your data: contact@orionapexcapital.com.

What we collect

We collect only what the service needs to do its job:

• Your account email address, used to sign you in and to send alerts.
• Your storefront URL and the pages our checks visit on it.
• The Meta dataset id and access token you paste during setup. The token is encrypted at rest (AES-256-GCM), is never logged, and is never shown or returned to a browser after you enter it.
• Monitoring evidence: the pixel network requests our synthetic crawls observe on your public storefront, Dataset Quality metrics we read from Meta with your token, and test event results.
• Operational logs needed to run and secure the service.

What we do not collect

Our crawls are GET-only visits to the public pages of your storefront, made the way an anonymous shopper's browser would load them: no carts, no checkout, no sign-ins. We do not collect your customers' personal information, order data, or payment data, and we have no access to your Shopify admin.

How we use data

To run scheduled checks, build your health reports, and alert you on confirmed breakage with the evidence attached. We do not sell data, share it for advertising, or use it for anything beyond providing the service.

Service providers

We run on a small set of processors: Vercel (application hosting), Neon (database), and Resend (email delivery). We call Meta's API with your token, on your behalf, to read the Dataset Quality metrics and to send the test events you trigger. Each provider processes data only to provide its service to us.

The free public checker

Our free checker lets anyone paste a store URL and get an instant, crawl-side verdict without signing in. When you use it we process the URL you submit, run the same GET-only public-page crawl described above against that URL, and briefly cache the resulting verdict (keyed by the URL, for up to 30 minutes) so repeat checks do not re-crawl. To prevent abuse we keep a short-lived rate-limit record tied to a one-way salted hash of your network address, never your raw IP. We do not create an account, store personal information, or retain anything about a checked store beyond the short cache window. Only point the checker at a store you are authorized to check.

Site analytics

This website uses cookieless, privacy-friendly page analytics (Vercel Web Analytics) to count visits in aggregate. It sets no cookies and does no cross-site tracking. A pixel-health company should model clean tracking hygiene on its own site.

Retention and deletion

We keep your data while your account is active. Email contact@orionapexcapital.com to delete your account and its data, including the stored Meta token; we honor deletion requests promptly. You can also revoke the token's access at any time from Meta's side, which immediately ends our ability to read anything with it.

Security

Tokens are encrypted at rest, connections to the service are encrypted in transit (TLS; crawl visits to your storefront use whatever protocol your store serves), and access tokens are excluded from logs by design. No system is perfectly secure; if we learn of a breach affecting your data we will notify you at your account email.

Changes to this policy

If this policy changes materially we will update this page and note the new date above. Continued use of the service after a change means you accept the updated policy.