Why does Cooee require Order Edit permission?
Shopify does not provide a way to natively link a specific visitor or session to a resulting order. Cooee uses the Order Edit permission for two specific purposes:
Session-to-Order Mapping — When a customer adds items to their cart, Cooee attaches session identifiers as cart attributes. When the cart converts to an order, Shopify carries those attributes over as
customAttributeson the order. Once the mapping is captured, Cooee cleans up by removing those attributes from the order — keeping your order data tidy. This cleanup step requires Edit permission.Campaign Attribution Tagging — When a customer places an order after interacting with a Cooee campaign (e.g. clicking a nudge or overlay), Cooee tags that order to record the attribution. This is how Cooee tracks campaign-driven revenue. Writing this tag also requires Edit permission.
What specific actions does Cooee perform using Order Edit permission?
Only the two actions described above: removing session-mapping attributes after they have been captured, and writing campaign attribution tags to orders.
Can this permission modify order pricing, discounts, fulfilment status, or customer information?
Technically, yes but Cooee only modifies order attributes, and only removes what it originally added. Pricing, discounts, fulfilment status, and customer information are never touched.
GA4 and Mixpanel don't require Order Edit permissions. Why does Cooee?
GA4 and Mixpanel work around Shopify's data model. Cooee works within it — which is what makes attribution more accurate, but also requires a higher permission level.
Is there an alternative approach that achieves the same outcome without Order Edit access?
No. There is no alternative that maintains the same level of attribution accuracy without this permission.