Privacy Policy

1. Information We Collect and Access

When you use OneAnalytics, we access and process certain information strictly necessary to provide the dashboard features:

• Google Account Information (OAuth 2.0): With your consent, we receive your basic profile data (Name, Email address, Profile picture URL, Google user ID) via the openid, userinfo.email, and userinfo.profile scopes.
• Google Analytics 4 Data (Read-Only): Using the https://www.googleapis.com/auth/analytics.readonly scope, we request read-only access to list your GA4 properties and query aggregate reporting metrics (e.g., active realtime users, top channels, sessions, country/city breakdown, page titles).
• Session and Authentication Tokens: We temporarily store encrypted OAuth access tokens and refresh tokens in secure, HTTP-only session cookies to query the Google Analytics Data API on your behalf during active sessions.
• Technical and Telemetry Data: Standard server logs such as IP address, browser user agent, and device type are logged for operational diagnostics and rate limit enforcement.

2. How We Use Your Information

We use your information exclusively for the following purposes:

• Authenticating your account and verifying your authorization.
• Displaying your GA4 properties in realtime, 7-day, and 30-day dashboard visualizations.
• Allowing you to compare metrics across your connected websites and applications.
• Maintaining secure user sessions and refreshing expired access tokens.

3. Google Limited Use and Data Sharing Disclosures

4. Data Storage, Encryption, and Security

We implement industry-standard technical and organizational security measures to protect your data:

• Encrypted Session Storage: OAuth tokens are encrypted using cryptographic signing (JWT with HMAC-SHA256) and stored in secure HttpOnly, SameSite=Lax, TLS-encrypted cookies.
• No Long-Term Metric Storage: GA4 metrics and reports are queried dynamically in real-time from Google APIs and displayed in your browser. We do not maintain a separate permanent database of your historical analytics data.
• Transport Encryption: All communications between your browser, our servers, and Google APIs occur strictly over encrypted HTTPS/TLS 1.3 connections.

5. Data Retention, Revocation, and Deletion

You retain full ownership and control of your data at all times:

• Session Logout: When you log out of OneAnalytics, your session cookie and stored tokens are immediately deleted from your browser and invalidated.
• Revoking Google Access: You can revoke OneAnalytics's access to your Google Account at any time directly through the Google Third-Party Apps & Services Settings. Revoking access instantly prevents OneAnalytics from querying any further data.
• Account & Data Deletion Request: If you wish to request full deletion of any cached identifiers or metadata, you can contact our support team at any time.

6. Cookies and Tracking Technologies

We use strictly necessary cookies to manage authentication sessions and remember your property selections. We may also use Google Analytics to understand aggregate usage patterns of the OneAnalytics application itself. You can control cookies through your browser settings.

7. Contact Us and Developer Information

If you have any questions, concerns, or privacy inquiries regarding this Privacy Policy or our compliance with Google API policies, please contact us at: