Skip to main content

Does Shogun A/B Testing Access My Checkout or Payment Data?

A clear answer on whether Shogun A/B Testing can access, store, or transmit checkout or payment data.

Written by James Power

No. Shogun A/B Testing can't access payment credentials (card numbers, CVV, or other billing account details) or what a customer types on the checkout page. This is true regardless of your store's plan, apps installed, or permissions granted — it's built into how Shopify's checkout and app platform work.

Why payment data isn't accessible to any app

Payment information, card numbers, CVV, and other payment credentials are handled entirely within Shopify's own PCI-compliant checkout and payment processing. That data goes directly from the customer to the payment processor and never reaches third-party apps through any integration, regardless of the permissions an app has been granted. This isn't a Shogun-specific safeguard; it's a boundary Shopify enforces for every app on its platform.

How Shogun A/B Testing's analytics actually work

Shogun A/B Testing's checkout-related metrics (like completed purchases) come from Shopify's web pixel API. Pixels run in a sandboxed environment defined by Shopify: they cannot read the checkout page's contents, only the specific set of structured event data Shopify chooses to pass through after an action occurs. In other words, the app isn't "watching" the checkout page — it receives a small, predefined set of fields about what happened, not what a customer typed.

What that data does — and doesn't — include

Shopify further restricts which fields an app can receive based on its protected customer data access level. Shogun A/B Testing operates at Level 1, which explicitly excludes name, email, phone number, and address — those fields require Level 2 access, along with individual approval for each field and additional security requirements. Shogun A/B Testing has not requested or been granted Level 2 access.

At Level 1, the app can receive non-identifying order information relevant to test performance, for example, whether a checkout was completed, order totals, and which products were purchased, which powers the conversion, AOV, and revenue metrics in your test dashboard.

In short

Shogun A/B Testing can tell whether a test variant led to more completed purchases and higher order values. It cannot see, store, or transmit a customer's name, contact details, or payment credentials — none of that is ever part of the data the app receives.

If you have questions about a specific concern, reach out via chat or email using the prompts at the bottom of your dashboard.

Did this answer your question?