PixelPro Reddit Conversions

Privacy Policy

Last updated 6 August 2026

PixelPro Reddit Conversions (“the app”, “we”) is a Shopify application that installs the Reddit Pixel on a merchant’s storefront and sends conversion events to Reddit’s Conversions API. This policy explains what the app collects, what it transmits to Reddit, and how to have that data deleted.

This policy covers the app only. It does not cover the merchant’s own store, Shopify, or Reddit — each has its own policy.

1. Who is who

Merchant — the Shopify store owner who installs the app. In GDPR terms the merchant is the controller of their shoppers’ data.
We — the app’s operator, acting as a processor on the merchant’s instructions.
Reddit — an independent recipient of the conversion data the merchant chooses to send, under Reddit’s privacy policy.

2. Data we receive about the merchant

When the app is installed, Shopify provides:

Shop domain, store name, contact email and phone, country, currency, primary language and Shopify plan.
An access token used to call the Shopify Admin API on the merchant’s behalf.

The merchant also enters, in the app:

Their Reddit Pixel ID and Reddit conversion access token.
Optionally, a Reddit test event ID, and which markets, collections, products or tags each pixel should track.

3. Data about shoppers, and what goes to Reddit

When a shopper browses the merchant’s storefront, the app records the event and forwards it to Reddit so the merchant can measure their Reddit advertising. Two paths are used: Reddit’s own pixel running in the shopper’s browser, and the Conversions API called from our server.

Data	Sent to Reddit as	Processing
IP address	`user.ip_address`	Sent as-is
Browser user agent	`user.user_agent`	Sent as-is
Reddit click ID from the ad link (`rdt_cid`)	`click_id`	Sent as-is
Reddit’s first-party cookie (`_rdt_uuid`)	`user.uuid`	Sent as-is
Screen width and height	`user.screen_dimensions`	Sent as-is
Page URL of the event	`event_source_url`	Sent as-is
Email address (checkout or signed-in customer)	`user.email`	SHA-256 hashed before sending
Phone number	`user.phone_number`	SHA-256 hashed before sending
Customer or order identifier	`user.external_id`	SHA-256 hashed before sending
Products viewed or purchased, quantities, prices, currency, order value	`metadata`	Sent as-is

Email, phone and customer ID are never sent in the clear. They are hashed with SHA-256 before leaving the store, and hashing cannot be reversed. A merchant can switch these identity signals off entirely by turning off Advanced matching on a pixel; the network signals above are still sent, because without them Reddit cannot attribute a conversion at all.

Events the app sends

PageVisit, ViewContent, Search, AddToCart, InitiateCheckout and Purchase. Nothing else is transmitted. The app does not send browsing history from other sites, and does not track shoppers across merchants.

4. Cookies

Reddit’s pixel sets its own first-party cookies on the merchant’s domain — _rdt_uuid, _rdt_cid, _rdt_em and _rdt_pn. The app additionally stores the Reddit click ID in the browser so it survives navigation. These exist to attribute a conversion to a Reddit ad click.

The app does not display a consent banner. Obtaining consent where the law requires it is the merchant’s responsibility, using their own consent tooling. Merchants who need to restrict processing can enable Limited Data Use on a pixel, which flags every event to Reddit with data_processing_options.

5. What we store, and for how long

Merchant configuration — shop details, pixel IDs and tokens. Kept while the app is installed.
Event counters — daily totals per pixel per event type. These are counts only: no shopper identifiers, no order contents, nothing that identifies a person.
Server logs — recent API calls, retained briefly for troubleshooting.

The app does not keep a per-shopper record. Events are forwarded to Reddit and discarded; only the aggregate counter is written.

6. Where data is processed

Data is processed on our servers and transmitted to Reddit over HTTPS. Sub-processors:

Shopify — the platform the app runs on.
Reddit — recipient of the conversion events described above.
Our hosting provider — runs the application server and database.

7. Deletion and access requests

The app implements Shopify’s mandatory compliance webhooks:

customers/data_request — a shopper asks the merchant what data is held.
customers/redact — a shopper asks for their data to be erased.
shop/redact — 48 hours after uninstall, the merchant’s data is erased.

Because the app stores no per-shopper record, a shopper redaction request has nothing to erase on our side. Data already delivered to Reddit is outside our control: use Reddit’s Data Deletion API to have Reddit erase it.

Uninstalling the app stops all tracking immediately and removes the merchant’s stored data.

8. Security

All traffic is over HTTPS. Reddit conversion access tokens are stored server-side and are never exposed to the storefront or returned by any public endpoint — the browser only ever receives a Pixel ID.

9. Children

The app is sold to businesses and is not directed at children. We do not knowingly process data from anyone under the age of majority in their jurisdiction.

10. Changes

If this policy changes materially, the date at the top is updated and merchants are notified through the app or by email.