YourTrackingfor Shopify
Legal

Data & API Usage

Last updated: 9 August 2026

YourTracking connects to Google Ads, Meta and Shopify to deliver server-side conversion tracking on behalf of each merchant. This page describes what each integration accesses, for what purpose, and the commitments that govern the data involved. It supplements our Privacy Policy and Terms of Service.

YourTracking is operated by Lodestar ecommerce LLC (5830 E 2ND ST, STE 7000 #34998, Casper, WY 82609, USA). For any end-customer data, YourTracking acts as a data processor on behalf of the merchant (the controller), and a signed Data Processing Agreement is in place before any such data is processed.

Google Ads API

The Service connects to the Google Ads API for the Google Ads accounts a merchant chooses to connect, in order to:

What it does

  • Conversion delivery — uploading server-side purchase conversions (offline conversions / Data Manager) with the real order value, using click identifiers captured first-party on the merchant's store.
  • Setup — creating and configuring the conversion actions the Service needs on the connected account.
  • Verification — checking that the conversions we send were accepted, so measurement stays accurate.

What it never does

  • No connections to Google Ads accounts a merchant has not connected.
  • No resale, licensing or sharing of Google Ads data.
  • No use of one merchant's data for the benefit of any other merchant or advertiser.
  • No building of advertising profiles of individuals.

Data obtained through the Google Ads API is used only for these conversion-delivery and measurement purposes, in compliance with the Google APIs Terms of Service and the Google Ads API policies.

Shopify API

The Service installs as a Shopify app and reads order data from the merchant's store — order identifiers, values, timestamps and status — as the source of truth that every conversion is matched and reconciled against.

To match a sale to the advertisement that produced it, the Service accesses the following Shopify Protected Customer Data fields: email, phone, name and address. These fields are used only for conversion matching and are put to the permitted Analytics and Advertising uses; they are hashed with SHA-256 before transmission to Google or Meta.

What it does

  • Reads orders for the connected store to detect purchases and their value.
  • Uses email, phone, name and address only to match a purchase to the click that produced it (Analytics and Advertising).

What it never does

  • No sending of plaintext customer identifiers to ad platforms — they are hashed first.
  • No use of customer data for anything beyond conversion matching for that same store.
  • No sale, rental or sharing of customer data.

Meta Conversions API (CAPI)

The Service sends completed purchases to Meta's Conversions API server-side and deduplicates them against the browser pixel, so a sale is counted once. Matching identifiers are hashed before transmission.

What it does

  • Delivers purchase conversions to the merchant's Meta dataset, matched to the click.
  • Deduplicates server events against the pixel by order.

What it never does

  • No non-purchase events — no refund, cancellation or adjustment data.
  • No unhashed identifiers.
  • No cross-merchant use of data.

Commitments

  • Purchases only. The Service sends completed purchases; it never sends refund, cancellation or non-purchase events to any ad platform.
  • Hashed before it leaves. Customer identifiers are hashed with SHA-256 before any transmission to Google or Meta.
  • No sale of data. Nothing the Service processes is sold, rented or shared with unrelated third parties.
  • Per-client isolation. One merchant's data is never used for the benefit of another merchant or advertiser, and clients' data is isolated.
  • Least privilege & security. Each integration carries only the access it needs; data is encrypted in transit and at rest, secrets are stored by reference, and access is audited. See our Privacy Policy for the full security and GDPR detail.

Sub-processors

The Service relies on Google (conversion delivery), Meta (conversion delivery), Shopify (the merchant's store platform), Hetzner (EU-resident hosting, Germany), Cloudflare (edge and security) and Stripe (billing), each under data-protection terms.

Contact

Questions about our data practices can be sent to info@yourtracking.ai.