Privacy Policy

Last updated: October 26, 2026

This policy explains how the GA4 Instant Dashboard ("the Service", "we", "us"), available at varnitsingh.com/tools/ga4-dashboard, accesses, uses and protects your information — in particular the Google user data you let it read. The short version: the Service runs in your browser, and your Google Analytics data never reaches any server we control.

What Google data the Service accesses

When you click Connect GA4, Google asks whether you allow the Service to view your Google Analytics data. This is the single OAuth scope the Service requests: https://www.googleapis.com/auth/analytics.readonly. It is read-only. With your permission, the Service reads:

  • The list of Google Analytics accounts and GA4 properties your Google account can access (names and IDs), via the Google Analytics Admin API, so you can choose one.
  • Aggregated report data for the property you choose, via the Google Analytics Data API: sessions, revenue, purchases, purchasers, event counts for the shopping steps, and breakdowns by date, channel, device, landing page and product name, plus the property's currency and time zone.

The Service does not request your email address, profile, contacts, or any other Google data, and it cannot change anything in your Google Analytics account.

How that data is used

Google user data is used for one purpose only: to render your own dashboard and findings, in your browser, for you. Specifically:

  • Your browser sends requests directly to Google's APIs (analyticsdata.googleapis.com and analyticsadmin.googleapis.com) and receives the responses directly. No proxy or server of ours sits in between.
  • The access token Google issues is held in your browser tab's memory only. It is not written to localStorage, cookies or any other storage, and it is never sent to us. Closing or reloading the tab discards it. Choosing Disconnect also revokes it with Google.
  • Report data is kept in memory in your tab while you view the dashboard and is discarded when you close the tab. It is not logged, cached on a server, or stored anywhere by us.
  • Exports (PNG, PDF, copied summary) are generated on your device and saved or copied only where you choose.

Sharing and transfer

We do not sell, share, transfer or disclose Google user data to anyone. Because the data never reaches us, we have nothing to share. We do not use it for advertising, to build user profiles, to train AI or machine-learning models, or for any purpose other than showing you your dashboard. No human at our end reads it.

Google API Services User Data Policy

The Service's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Revoking access

You can remove the Service's access at any time from your Google Account at myaccount.google.com/permissions, or by choosing Disconnect in the tool. Since we store no Google data, there is nothing further to delete on our side.

Information you choose to send us

The dashboard offers optional forms — for example "Email me this every Monday" or a request for a live dashboard or tracking audit. If you submit one, we receive only what you type (your email address and, where asked, your store URL, the platforms you use and a monthly revenue range), the page you submitted from, any campaign tags in its URL, your country as reported by our host, and a one-way hash of your IP address used to limit spam. These forms never include your Google Analytics data, property IDs or report values. We use the submission only to reply to you about what you asked for, keep it in a private database hosted by Cloudflare, and delete it on request.

Analytics on this website

These pages use Google Analytics to count visits and which steps of the tool are used (for example, that someone clicked Connect or exported a PNG) and how long the dashboard took to load. Those events never include your property names, property IDs, or any of your report values.

Local storage

The site stores one preference — your light/dark theme — in your browser's localStorage. It stays on your device.

Hosting and server logs

The site is served by Cloudflare, which may record standard request data (such as IP address, browser type and pages requested) for security and reliability. Those logs cannot contain your analytics data, which never passes through our host.

Children's privacy

The Service is meant for businesses and is not directed at children under 13. We do not knowingly collect personal information from children.

Changes to this policy

If we change how Google user data is accessed or used, we will update this page and the "Last updated" date before the change takes effect.

Contact

Questions about this policy or your data? Contact us through varnitsingh.com/contact.