Privacy Policy

Effective date: 16 June 2026

GA Data (“the app”, “we”, “us”) is a read-only dashboard that lets a signed-in user view their own Google Analytics 4 (GA4) data for multiple properties in one place. This policy explains what data we access, how we use it, and how it is stored and protected.

1. Information we access

When you sign in with Google, with your consent we access:

• Basic profile — your Google account identifier, email address, name, and avatar (scopes openid, email, profile). Used to create your account and identify you.
• Google Analytics (read-only) — scope https://www.googleapis.com/auth/analytics.readonly. Used to (a) list the GA4 properties you already have access to via the Analytics Admin API, so you can choose which to add, and (b) read aggregate metrics (active users, total users, page views) for the properties you select, via the Analytics Data API.

We request only the read-only Analytics scope. The app never creates, modifies, or deletes any Analytics configuration or data, and never accesses data you could not already access yourself in Google Analytics.

2. How we use the information

• To authenticate you and keep you signed in.
• To display the list of GA4 properties you can add.
• To fetch and show metrics for the properties you choose to track.

We do not use your data for advertising, and we do not sell, rent, or share it with third parties.

3. What we store

• Your Google account id, email, name, and avatar URL.
• An OAuth refresh token, stored server-side, used only to fetch your own Analytics metrics on your behalf.
• The GA4 property IDs you choose to track.

Analytics report data is fetched on demand and shown to you; we do not build a long-term store of your Analytics metrics.

4. Limited Use disclosure

5. Data sharing

We do not share your personal data or Google user data with third parties, except as required to operate the service (secure hosting) or to comply with law. We never transfer Google user data to data brokers or for advertising.

6. Security

Data is stored on access-controlled servers and transmitted over HTTPS. OAuth tokens are kept server-side and are not exposed to the browser.

7. Data retention and deletion

You stay in control of your data:

• Remove a property at any time to stop tracking it.
• Sign out at any time.
• Revoke the app’s access from your Google Account permissions page.
• Request full deletion of your account and stored data by emailing us (see below); we will delete your record and refresh token.

8. Contact

Questions or deletion requests: tzenito@gmail.com.

This policy may be updated; material changes will be reflected by a new effective date above.