Does Shopify Have Undocumented Session Filtering Beyond Bot Detection?

Data and Analytics
,
1

I’m investigating a persistent discrepancy between session counts in our third-party analytics platform (Cooee) and Shopify’s native analytics, and I’m curious if others have noticed similar patterns.

What We’re Seeing:
Our platform consistently shows higher session counts by quite some margins than Shopify Analytics reports for the same time periods. After extensive investigation, we’ve identified that the “extra” sessions we’re tracking include:

  1. Traffic from VPN/proxy IPs (London, Italy, etc.)

  2. Devices with suspicious fingerprints (emulated Android devices with atypical browser engines)

  3. Multi-store browsing patterns from single IPs. Stores’ base region is totally different. One store is based out of India and another from London. No similarity or relation between stores.

The Question:
We know about Shopify’s documented “Human or bot session” filter that merchants can apply in analytics reports. However, our findings suggest Shopify might be filtering certain traffic before sessions are even created - not just in reporting, but at a deeper level.
Specifically:

  • Some traffic that loads our store and fires our JavaScript tracking never appears in Shopify’s session counts at all

  • This isn’t about the bot filter dimension - these sessions seem to never enter Shopify’s system

  • The filtering appears to target specific IP ranges, device signatures, or behavioral patterns

Has Anyone Else Noticed This?
If you use third-party analytics tools (Google Analytics, Matomo, etc.) alongside Shopify Analytics:

  • Do you see consistent session count discrepancies?

  • Have you identified patterns in what traffic Shopify counts vs. doesn’t count?

  • Has Shopify documented any edge-level filtering beyond the standard bot detection?

I’m aware of the massive bot traffic issues discussed in other threads (particularly the Chinese bot traffic). But this seems different - not bots creating fake sessions, but legitimate-looking traffic that Shopify silently filters out without documentation.

Why This Matters:
For third-party app developers and analytics providers, understanding Shopify’s session creation logic is critical. If Shopify has undocumented filtering mechanisms that prevent certain traffic from ever becoming sessions, we need to know:

  • What criteria are used?

  • Is this documented anywhere for developers?

  • Should third-party tools replicate this filtering?

Any insights would be appreciated. Particularly interested in hearing from:

  • Other analytics/personalization platform developers

  • Merchants who’ve done deep-dive comparisons between Shopify and GA4/other tools

  • Anyone with insight into Shopify’s edge infrastructure

1 Like