Is Shopify App Detector by Shopify Spy safe?
Clean risk
Shopify App Detector sends the active tab's site origin to api.shopify-spy.com to look up which Shopify apps that store uses.
When you open the extension's popup on a Shopify store, it reads the active tab's URL and sends just the origin (scheme and host, not the full path or query) to the vendor's backend at api.shopify-spy.com. The server returns the list of Shopify apps detected on that store, which the popup then displays. The request fires only on a user click and only on tabs identified as Shopify stores.
0Risk
AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.
Publishers can request a review.
Data recipients
api.shopify-spy.com