Privacy Policy
Last updated: October 17, 2026
1. Information We Collect
When you use CoreVitalsFixer, we collect:
- Store URL — the Shopify store you want to analyze
- Email address — if you provide it through our audit request form
- Lighthouse performance data — automated performance test results for the URLs you submit
- Analytics data — anonymous page views and interactions via Google Analytics
2. How We Use Your Information
- To run performance analyses on your Shopify store
- To deliver performance reports and improvement recommendations
- To contact you about your audit results or product updates (if you opt in)
- To improve our analysis tools and content
3. Data Storage & Security
Performance reports are stored securely and are accessible only via unique, unguessable tokens. We do not sell or share your personal information with third parties for marketing purposes. We use industry-standard security measures to protect your data.
4. Third-Party Services
We use the following third-party services:
- Google Analytics & Google Ads — for website analytics and advertising (see Google's privacy policy)
- Make (Integromat) — to process form submissions and deliver reports
- Shopify — storefront analysis uses public storefront pages; the Shopify app uses Shopify's APIs as described in section 5
- Lighthouse — Google's open-source performance auditing tool
5. Shopify App
If you install the CoreVitalsFixer app from Shopify, the app requests only the read_themes access scope so it can review theme code for performance issues. It does not request access to customer, order, or payment data.
- What we store: your shop domain and the app session needed to authenticate with Shopify, plus performance reports for storefront URLs you choose to scan.
- Uninstalling: when you uninstall the app, its Shopify sessions for your store are deleted.
- Shopify privacy requests: we respond to Shopify's mandatory privacy webhooks (customer data request, customer redact, and shop redact). On a shop redact request, all app data associated with your store is deleted.
6. Data Retention
We retain your performance report data for up to 12 months. You can request deletion of your data at any time by contacting us.
7. Your Rights
You have the right to:
- Access the personal data we hold about you
- Request correction or deletion of your data
- Withdraw consent for data processing
- Opt out of Google Analytics tracking
8. Contact
For privacy-related inquiries, contact us at: privacy@corevitalsfixer.com
9. Changes to This Policy
We may update this privacy policy from time to time. Changes will be posted on this page with an updated revision date.