Website safety reportLast scanned Jun 18, 2026

Is Pixieset Safe?

Ads, Trackers, Security & UX Review

6 public pages rendered. The score, signal cards, and evidence tables below show what appeared in the browser sample.

Status

Scan completed

Host

pixieset.com

Confidence

72/100

Observed safety score

High observed risk

Ad risk: Elevated

23/ 100

Signal mix

Weak

AdsElevated

TrackingHigh

SecurityHigh

3

Ad domains

30

Tracker domains

72/100

Confidence

Host

pixieset.com

Creator galleries and client proofing

Hosting

CLOUDFLARENET - Cloudflare, Inc., US

104.16.187.173; AS13335

TLS

Enabled

Google Trust Services

Requests

473

31 third-party domains observed

Risk map

What the scan noticed

Four quick signals first. Evidence stays grouped by risk area.

High

Data risk

Tracking signals

High

Security posture

Header gaps

Elevated

Ad risk

Ad pressure

Moderate-low

User experience

Low friction

Data risk31 3rd-party domains seen.High

Meaning

The rendered scan observed 30 tracker-domain matches, led by ka-p.fontawesome.com (30), google.com (18), googletagmanager.com (13) and 27 more, and up to 13 cookies across the sampled public pages.

Evidence

31 3rd-party domains seen.
30 tracker-domain matches were classified as known tracker patterns in the browser sample.
13 total cookies and 3 3rd-party cookies seen.
2 privacy, terms, help, safety, or opt-out style links were discovered.
The enrichment sample included visible cookie, tracking, or analytics language.

Security postureHSTS header was not observed in the fetched response.High

Meaning

Security posture is based on observed TLS, response headers, mixed-content behavior, and usable external-check output.

Evidence

HSTS header was not observed in the fetched response.
TLS connected with TLSv1.3; issuer: Google Trust Services.
CSP header was not observed in the fetched response.
X-Frame header was not observed in the fetched response.
No mixed-content requests seen in the rendered browser sample.
Structured-data types observed during enrichment: unparseable-json-ld.

Ad risk3 ad-domain matches were classified as known ad-network patterns in the browser sample.Elevated

Meaning

The rendered scan observed 3 ad-domain matches across 6 sampled public pages, led by googleads.g.doubleclick.net (5), stats.g.doubleclick.net (4), ad.doubleclick.net (2).

Evidence

3 ad-domain matches were classified as known ad-network patterns in the browser sample.
473 browser requests seen.
1 static script domain seen across the enrichment sample.
No pop-up window calls seen in the automated pass.

User experienceNo notification permission prompts seen.Moderate-low

Meaning

The rendered public-page sample loaded with HTTP 200 and 16172 visible text characters.

Evidence

No notification permission prompts seen.
16172 rendered text characters seen.
Fetched page returned HTTP 200.
Sampled page titles: Pixieset: Client Photo Gallery, Website, CRM for Photographers; Pixieset | Privacy Policy; Pixieset | Terms of Service.

Evidence

Scan evidence at a glance

Key signals first, with important limits kept close so the report stays useful without overstating certainty.

Captured evidence

Direct observations

6

Pages sampled

Rendered browser pass

473

Requests

31 third-party - 3 ad - 30 tracker

13

Cookies

3 third-party

Headers

Security posture

HSTS no - CSP no - X-Frame no

Scan boundary

Important limits

Limit

Boundary

Creator-gallery sites can load different scripts on...

Can change

Ad context

Location, consent, A/B tests

External checks

Source signals

Flagged

HTTP Observatory

MDN HTTP Observatory returned grade D with score 30 and 4 failed checks

Ads and trackers

Ads and trackers found in the scan

Observed domains are grouped by company or tool, purpose, request volume, and the sampled pages where they appeared.

17

Entities

Companies or tools grouped from observed domains.

7

Categories

Most active: Tracking and measurement.

170

Requests

Classified ad or tracker requests in the sample.

5/6

Pages seen

Sampled pages with at least one classified signal.

Activity by purpose

Grouped by evidence

Tracking and measurement

9 entities / 18 domains

109

Analytics

2 entities / 5 domains

18

Social tracking

1 entity / 2 domains

13

Tag management

1 entity / 1 domain

13

Advertising

1 entity / 3 domains

11

Customer messaging

2 entities / 3 domains

5

Top observed entities

Fonticons

Tracking and measurement

tracker

38

requests

3/6

pages

ka-p.fontawesome.comkit.fontawesome.com4.1% web prevalence

Google

Tracking and measurement

tracker

33

requests

4/6

pages

accounts.google.comad.doubleclick.netfonts.googleapis.com+446% web prevalence

Google

Tag management

tracker

13

requests

5/6

pages

googletagmanager.com59% web prevalence

Facebook

Social tracking

tracker

13

requests

4/6

pages

connect.facebook.netfacebook.com19% web prevalence

Posthog

Analytics

tracker

13

requests

4/6

pages

app.posthog.comus-assets.i.posthog.comus.i.posthog.com0.5% web prevalence

Adobe

Tracking and measurement

tracker

13

requests

3/6

pages

p.typekit.netuse.typekit.net6.2% web prevalence

Ad-domain evidence

Raw domains and request paths classified as ad-network matches in rendered samples.

3

domains

11

classified requests

4

pages with matches

googleads.g.doubleclick.net

Matched known ad-network patterns during the rendered public-page sample. Observed on 4 rendered pages. Request types: script.

5 requests

Seen in sample

4 sampled pages

Request types

script

Matched hosts

googleads.g.doubleclick.net

Domain matched known ad-network patterns.

stats.g.doubleclick.net

Matched known ad-network patterns during the rendered public-page sample. Observed on 4 rendered pages. Request types: ping.

4 requests

Seen in sample

4 sampled pages

Request types

ping

Matched hosts

stats.g.doubleclick.net

Domain matched known ad-network patterns.

ad.doubleclick.net

Matched known ad-network patterns during the rendered public-page sample. Observed on 2 rendered pages. Request types: fetch.

2 requests

Seen in sample

2 sampled pages

Request types

fetch

Matched hosts

ad.doubleclick.net

Domain matched known ad-network patterns.

Tracker-domain evidence

Raw domains and request paths classified as tracker matches in rendered samples.

30

domains

159

classified requests

5

pages with matches

ka-p.fontawesome.com

Matched DuckDuckGo Tracker Radar tracker patterns during the rendered public-page sample. Observed on 3 rendered pages. Request types: fetch, font. Classified owner: Fonticons. Tracker owner: Fonticons.

30 requests

Seen in sample

3 sampled pages

Request types

fetchfont

Context

Owner: FonticonsPrevalence: 4.1%

Matched hosts

ka-p.fontawesome.com

Domain matched DuckDuckGo Tracker Radar tracker data for Fonticons.

google.com

Matched DuckDuckGo Tracker Radar tracker patterns during the rendered public-page sample. Observed on 4 rendered pages. Request types: fetch, image.

18 requests

Seen in sample

4 sampled pages

Request types

fetchimage

Context

Prevalence: 46%

Matched hosts

google.com

Domain matched DuckDuckGo Tracker Radar tracker patterns.

googletagmanager.com

Matched DuckDuckGo Tracker Radar tracker patterns during the rendered public-page sample. Observed on 5 rendered pages. Request types: script.

13 requests

Seen in sample

5 sampled pages

Request types

script

Context

Prevalence: 59%

Matched hosts

googletagmanager.com

Domain matched DuckDuckGo Tracker Radar tracker patterns.

dka575ofm4ao0.cloudfront.net

Matched DuckDuckGo Tracker Radar tracker patterns during the rendered public-page sample. Observed on 1 rendered page. Request types: script, stylesheet, image, font. Classified owner: Amazon.com. Tracker owner: Amazon.com.

12 requests

Seen in sample

1 sampled page

Request types

scriptstylesheetimagefont

Context

Owner: Amazon.comPrevalence: 16%

Matched hosts

dka575ofm4ao0.cloudfront.net

Domain matched DuckDuckGo Tracker Radar tracker data for Amazon.com.

use.typekit.net

Matched DuckDuckGo Tracker Radar tracker patterns during the rendered public-page sample. Observed on 3 rendered pages. Request types: font. Classified owner: Adobe. Tracker owner: Adobe.

10 requests

Seen in sample

3 sampled pages

Request types

font

Context

Owner: AdobePrevalence: 6.2%

Matched hosts

use.typekit.net

Domain matched DuckDuckGo Tracker Radar tracker data for Adobe.

us-assets.i.posthog.com

Matched DuckDuckGo Tracker Radar tracker patterns during the rendered public-page sample. Observed on 4 rendered pages. Request types: script.

9 requests

Seen in sample

4 sampled pages

Request types

script

Context

Prevalence: 0.5%

Matched hosts

us-assets.i.posthog.com

Domain matched DuckDuckGo Tracker Radar tracker patterns.

connect.facebook.net

Matched DuckDuckGo Tracker Radar tracker patterns during the rendered public-page sample. Observed on 4 rendered pages. Request types: script. Classified owner: Facebook. Tracker owner: Facebook.

8 requests

Seen in sample

4 sampled pages

Request types

script

Context

Owner: FacebookPrevalence: 19%

Matched hosts

connect.facebook.net

Domain matched DuckDuckGo Tracker Radar tracker data for Facebook.

kit.fontawesome.com

Matched DuckDuckGo Tracker Radar tracker patterns during the rendered public-page sample. Observed on 3 rendered pages. Request types: script, fetch, other. Classified owner: Fonticons. Tracker owner: Fonticons.

8 requests

Seen in sample

3 sampled pages

Request types

scriptfetchother

Context

Owner: FonticonsPrevalence: 4.1%

Matched hosts

kit.fontawesome.com

Domain matched DuckDuckGo Tracker Radar tracker data for Fonticons.

static.zdassets.com

Matched DuckDuckGo Tracker Radar tracker patterns during the rendered public-page sample. Observed on 1 rendered page. Request types: stylesheet, script, font.

7 requests

Seen in sample

1 sampled page

Request types

stylesheetscriptfont

Context

Prevalence: 1.1%

Matched hosts

static.zdassets.com

Domain matched DuckDuckGo Tracker Radar tracker patterns.

facebook.com

Matched DuckDuckGo Tracker Radar tracker patterns during the rendered public-page sample. Observed on 4 rendered pages. Request types: image. Classified owner: Facebook. Tracker owner: Facebook.

5 requests

Seen in sample

4 sampled pages

Request types

image

Context

Owner: FacebookPrevalence: 17%

Matched hosts

facebook.com

Domain matched DuckDuckGo Tracker Radar tracker data for Facebook.

googleads.g.doubleclick.net

Matched DuckDuckGo Tracker Radar tracker patterns during the rendered public-page sample. Observed on 4 rendered pages. Request types: script.

5 requests

Seen in sample

4 sampled pages

Request types

script

Context

Prevalence: 45%

Matched hosts

googleads.g.doubleclick.net

Domain matched DuckDuckGo Tracker Radar tracker patterns.

analytics.google.com

Matched DuckDuckGo Tracker Radar tracker patterns during the rendered public-page sample. Observed on 4 rendered pages. Request types: fetch.

4 requests

Seen in sample

4 sampled pages

Request types

fetch

Context

Prevalence: 46%

Matched hosts

analytics.google.com

Domain matched DuckDuckGo Tracker Radar tracker patterns.

stats.g.doubleclick.net

Matched DuckDuckGo Tracker Radar tracker patterns during the rendered public-page sample. Observed on 4 rendered pages. Request types: ping.

4 requests

Seen in sample

4 sampled pages

Request types

ping

Context

Prevalence: 45%

Matched hosts

stats.g.doubleclick.net

Domain matched DuckDuckGo Tracker Radar tracker patterns.

p.typekit.net

Matched DuckDuckGo Tracker Radar tracker patterns during the rendered public-page sample. Observed on 3 rendered pages. Request types: stylesheet. Classified owner: Adobe. Tracker owner: Adobe.

3 requests

Seen in sample

3 sampled pages

Request types

stylesheet

Context

Owner: AdobePrevalence: 6.2%

Matched hosts

p.typekit.net

Domain matched DuckDuckGo Tracker Radar tracker data for Adobe.

us.i.posthog.com

Matched DuckDuckGo Tracker Radar tracker patterns during the rendered public-page sample. Observed on 3 rendered pages. Request types: fetch.

3 requests

Seen in sample

3 sampled pages

Request types

fetch

Context

Prevalence: 0.5%

Matched hosts

us.i.posthog.com

Domain matched DuckDuckGo Tracker Radar tracker patterns.

ad.doubleclick.net

Matched DuckDuckGo Tracker Radar tracker patterns during the rendered public-page sample. Observed on 2 rendered pages. Request types: fetch.

2 requests

Seen in sample

2 sampled pages

Request types

fetch

Context

Prevalence: 45%

Matched hosts

ad.doubleclick.net

Domain matched DuckDuckGo Tracker Radar tracker patterns.

api-iam.intercom.io

Matched DuckDuckGo Tracker Radar tracker patterns during the rendered public-page sample. Observed on 1 rendered page. Request types: xhr.

2 requests

Seen in sample

1 sampled page

Request types

xhr

Context

Prevalence: 0.4%

Matched hosts

api-iam.intercom.io

Domain matched DuckDuckGo Tracker Radar tracker patterns.

ds-cdn.prod-east.frontend.public.atl-paas.net

Matched DuckDuckGo Tracker Radar tracker patterns during the rendered public-page sample. Observed on 1 rendered page. Request types: font, stylesheet. Classified owner: Atlassian. Tracker owner: Atlassian.

2 requests

Seen in sample

1 sampled page

Request types

fontstylesheet

Context

Owner: AtlassianPrevalence: <0.1%

Matched hosts

ds-cdn.prod-east.frontend.public.atl-paas.net

Domain matched DuckDuckGo Tracker Radar tracker data for Atlassian.

fonts.googleapis.com

Matched DuckDuckGo Tracker Radar tracker patterns during the rendered public-page sample. Observed on 1 rendered page. Request types: stylesheet.

2 requests

Seen in sample

1 sampled page

Request types

stylesheet

Context

Prevalence: 39%

Matched hosts

fonts.googleapis.com

Domain matched DuckDuckGo Tracker Radar tracker patterns.

js.intercomcdn.com

Matched DuckDuckGo Tracker Radar tracker patterns during the rendered public-page sample. Observed on 1 rendered page. Request types: script.

2 requests

Seen in sample

1 sampled page

Request types

script

Context

Prevalence: 0.4%

Matched hosts

js.intercomcdn.com

Domain matched DuckDuckGo Tracker Radar tracker patterns.

accounts.google.com

Matched DuckDuckGo Tracker Radar tracker patterns during the rendered public-page sample. Observed on 1 rendered page. Request types: script.

1 request

Seen in sample

1 sampled page

Request types

script

Context

Prevalence: 46%

Matched hosts

accounts.google.com

Domain matched DuckDuckGo Tracker Radar tracker patterns.

app.posthog.com

Matched DuckDuckGo Tracker Radar tracker patterns during the rendered public-page sample. Observed on 1 rendered page. Request types: script.

1 request

Seen in sample

1 sampled page

Request types

script

Context

Prevalence: 0.5%

Matched hosts

app.posthog.com

Domain matched DuckDuckGo Tracker Radar tracker patterns.

by2.uservoice.com

Matched DuckDuckGo Tracker Radar tracker patterns during the rendered public-page sample. Observed on 1 rendered page. Request types: script.

1 request

Seen in sample

1 sampled page

Request types

script

Context

Prevalence: <0.1%

Matched hosts

by2.uservoice.com

Domain matched DuckDuckGo Tracker Radar tracker patterns.

cdnjs.cloudflare.com

Matched DuckDuckGo Tracker Radar tracker patterns during the rendered public-page sample. Observed on 1 rendered page. Request types: script. Classified owner: Cloudflare. Tracker owner: Cloudflare.

1 request

Seen in sample

1 sampled page

Request types

script

Context

Owner: CloudflarePrevalence: 24%

Matched hosts

cdnjs.cloudflare.com

Domain matched DuckDuckGo Tracker Radar tracker data for Cloudflare.

google-analytics.com

Matched DuckDuckGo Tracker Radar tracker patterns during the rendered public-page sample. Observed on 1 rendered page. Request types: fetch.

1 request

Seen in sample

1 sampled page

Request types

fetch

Context

Prevalence: 39%

Matched hosts

google-analytics.com

Domain matched DuckDuckGo Tracker Radar tracker patterns.

gstatic.com

Matched DuckDuckGo Tracker Radar tracker patterns during the rendered public-page sample. Observed on 1 rendered page. Request types: script.

1 request

Seen in sample

1 sampled page

Request types

script

Context

Prevalence: 41%

Matched hosts

gstatic.com

Domain matched DuckDuckGo Tracker Radar tracker patterns.

o151757.ingest.sentry.io

Matched DuckDuckGo Tracker Radar tracker patterns during the rendered public-page sample. Observed on 1 rendered page. Request types: fetch. Classified owner: Functional Software. Tracker owner: Functional Software.

1 request

Seen in sample

1 sampled page

Request types

fetch

Context

Owner: Functional SoftwarePrevalence: 1.8%

Matched hosts

o151757.ingest.sentry.io

Domain matched DuckDuckGo Tracker Radar tracker data for Functional Software.

recaptcha.net

Matched DuckDuckGo Tracker Radar tracker patterns during the rendered public-page sample. Observed on 1 rendered page. Request types: script.

1 request

Seen in sample

1 sampled page

Request types

script

Context

Prevalence: 0.3%

Matched hosts

recaptcha.net

Domain matched DuckDuckGo Tracker Radar tracker patterns.

widget.intercom.io

Matched DuckDuckGo Tracker Radar tracker patterns during the rendered public-page sample. Observed on 1 rendered page. Request types: script.

1 request

Seen in sample

1 sampled page

Request types

script

Context

Prevalence: 0.4%

Matched hosts

widget.intercom.io

Domain matched DuckDuckGo Tracker Radar tracker patterns.

widget.uservoice.com

Matched DuckDuckGo Tracker Radar tracker patterns during the rendered public-page sample. Observed on 1 rendered page. Request types: script.

1 request

Seen in sample

1 sampled page

Request types

script

Context

Prevalence: <0.1%

Matched hosts

widget.uservoice.com

Domain matched DuckDuckGo Tracker Radar tracker patterns.

Alternatives

Pixieset alternatives to compare before choosing

These options are category-relevant comparison leads for Pixieset. Each card separates why it is comparable and when it fits.

SmugMug

smugmug.com

Why compare it

SmugMug is a related comparison lead for creator gallery and photo-hosting pages.

Best fit

Use it as a discovery lead, then compare its own ads, trackers, cookies, and security signals before deciding.

Zenfolio

zenfolio.com

Why compare it

Zenfolio is a related comparison lead for photographer portfolio and client-gallery pages.

Best fit

Use it as a discovery lead, then compare its own ads, trackers, cookies, and security signals before deciding.

Pic-Time

pic-time.com

Why compare it

Pic-Time is a related comparison lead for photographer gallery and proofing pages.

Best fit

Use it as a discovery lead, then compare its own ads, trackers, cookies, and security signals before deciding.

ShootProof

shootproof.com

Why compare it

ShootProof is a related comparison lead for photographer client-gallery and proofing pages.

Best fit

Use it as a discovery lead, then compare its own ads, trackers, cookies, and security signals before deciding.

FAQs

Pixieset safety questions answered

Is Pixieset safe to use?

Latest scan of Pixieset across 6 public pages captured 473 browser requests, 31 third-party domains, 3 ad-domain matches, 30 tracker-domain matches, and 13 cookies (3 third-party). Header gaps: HSTS, CSP, X-Frame-Options. External checks: HTTP Observatory flagged. This is not a guarantee of safety; it is a time-bound public-page evidence report.

What did Blockify actually observe on Pixieset?

Key observations from the rendered sample: 473 browser requests, 31 third-party domains, 3 ad-domain matches, 30 tracker-domain matches, and 3 third-party cookies. Header gaps: HSTS, CSP, X-Frame-Options.

Does Pixieset use ads or trackers?

The rendered public-page scan found 3 ad-domain matches and 30 tracker-domain matches across 6 sampled pages. The most active matches were ka-p.fontawesome.com (30), google.com (18), googletagmanager.com (13) and 27 more.

What should I check before uploading or buying through Pixieset?

Check storefront scripts, checkout provider, upload flow, proofing access, password-protected galleries, delivery pages, and client-account settings.

Why does the report show pixieset.com instead of another domain?

We tested pixieset.com because it is the website address selected for this report.

What should I compare before choosing Pixieset alternatives?

Compare the same evidence categories: rendered requests, ad-domain matches, tracker-domain matches, cookies, security headers, external checks, and whether each alternative fits the same user task.

Can Blockify guarantee that this website is safe?

No. Blockify can reduce ads, trackers, and pop-ups in the browser, but no scan can guarantee every page, account flow, future visit, or personalized state is safe.