Starship
starship / search / pinterest-sales

Audit report

Pinterest

Broad accessReach : moderateSensitive Access

by Pinterest, Inc. · Sales Channels · Shopify App Store

Sales Channelsv2.6.4
Risk level
Broad access
Executive summary

Canal officiel Pinterest. Risque Medium, partage events pour ads et sync catalogue. Périmètre comparable à Google mais surface plus restreinte.

Key insights

  • ◆Pinterest Tag + sync catalogue + Buyable Pins.
  • ◆Risque Medium, partage events ads, surface plus petite que Meta/TikTok.
  • ◆Éditeur US public (NYSE: PINS).
  • ◆Note merchants 4,3 sur 3 140 avis.

Top findings

No critical or high findings detected.
Synthesis

Analysis summary

Canal officiel Pinterest. Risque Medium, partage events pour ads et sync catalogue. Périmètre comparable à Google mais surface plus restreinte.

Key insights
  • ◆Pinterest Tag + sync catalogue + Buyable Pins.
  • ◆Risque Medium, partage events ads, surface plus petite que Meta/TikTok.
  • ◆Éditeur US public (NYSE: PINS).
  • ◆Note merchants 4,3 sur 3 140 avis.
  • ◆SOC 2 + ISO 27001.

This section is available to signed-in users

Sign up free to unlock findings, data flow and theme code analysis for every Shopify app.

Get started
Permissions

OAuth scopes requested

These are the access permissions this app asks for during install. The sensitivity column reflects PII exposure and merchant impact.

read_products
Low

Sync catalogue.

read_orders
Medium

Attribution.

write_pixels
High

Pinterest Tag.

This section is available to signed-in users

Sign up free to unlock findings, data flow and theme code analysis for every Shopify app.

Get started

This section is available to signed-in users

Sign up free to unlock findings, data flow and theme code analysis for every Shopify app.

Get started
Attack surface

Network surface

Primary domain
pinterest.com
TLS grade
A+
HSTS
Enabled
CSP
Enabled

TLS 1.3, HSTS, CSP.

Posture

Compliance & certifications

GDPR webhooks Pass
SOC 2 Type II Pass
ISO 27001 Pass
PCI DSS Fail

SOC 2 + ISO 27001. RGPD + DPA publique. EU-US DPF.

Privacy policy
Track record

Publisher reputation

Publisher
Pinterest, Inc.
Verified Shopify Partner
Yes
Years active
7
Other apps
0
Past incidents
No past incidents on record.
LLM exposure

AI / LLM usage

No LLM usage detected. This app does not appear to forward any customer or merchant data to large-language-model providers.