PixelSpeed is a Shopify app that optimizes product images. This page explains what data the app handles, why, where it goes, and how to have it deleted. It is written to be read, not skimmed past — it is short because the app deliberately handles very little.
What we store about your store
Your store's domain (the .myshopify.com address) and the Shopify access token the app uses to work on your behalf. The token is encrypted at rest.
Product image records: for each product image we've looked at, its Shopify ID, URL, file size before and after, format, and whether we changed it.
A backup copy of each original image we modify, so you can revert any image to exactly what it was.
Alt text we generated for an image, and a flag recording whether the alt text on an image was written by you (so we never overwrite it).
Your plan and usage (free or Pro, and how many images were fixed this month), so the app can enforce the free plan's limits without ever charging you unexpectedly.
Optional: a monthly revenue figure if you type one into the dashboard for the savings estimate, and your store's contact email if weekly summary emails are enabled. Both are optional; the email has a one-click unsubscribe.
What we do not collect
No data about your customers. PixelSpeed does not read orders, customer records, addresses, or anything else about the people who shop with you. It requests only the Shopify permissions needed to read and update product images and files, and to know your store's language. When Shopify sends us a customer data request or deletion request, we respond as required — and there is nothing to return or delete, because we hold nothing.
Nothing from your theme. The app never reads or edits your theme files or store settings.
Where the data goes
To do its job, the app uses these services, each only for the purpose stated:
Shopify — the platform the app runs inside. Optimized images are uploaded back to Shopify and served by Shopify's own CDN, exactly as before.
Render (Frankfurt, EU) — hosts the app.
Neon (Frankfurt, EU) — the database holding the records above.
Cloudflare R2 — stores the backup copies of original images. These are private; they are not served publicly.
Anthropic — to write alt text, a reduced-size copy of the product image and the product's title, type and brand are sent to Anthropic's API, which returns a description. Nothing about your customers is included.
Resend — sends the optional weekly summary email, if enabled.
We do not sell data, share it with advertisers, or use it for anything but running the app.
How long we keep it, and how to delete it
While the app is installed, the records above are kept so the dashboard, revert, and plan limits work.
When you uninstall, the app's access to your store ends immediately and its session is deleted. When Shopify then sends the standard store deletion request (48 hours after uninstall), every record and every backup image is permanently deleted.
Note that uninstalling does not restore images to their originals — Shopify revokes the app's access at the moment of uninstall, before it can act. Revert any images you want restored from the dashboard before uninstalling.
Security
All traffic is over HTTPS. Shopify access tokens are encrypted at rest. Webhooks from Shopify are verified by signature before being processed. The app requests the minimum set of Shopify permissions its features need.
Changes and contact
If this policy changes in a way that matters, the effective date above will change with it. Questions, deletion requests, or concerns: isadursun.online@gmail.com.