Privacy Policy

GGAnalytics (the “Service”) is operated by Marchant Technologies LLC (“we,” “us,” or “our”). We provide analytics and planning tools for gaming YouTube creators. This Privacy Policy describes how we handle information when you use our website, dashboards, Chrome extension, and tools.

The Service uses YouTube API Services. By using features that connect your YouTube channel, you also agree to the YouTube API Services Terms of Service and Google's applicable policies, including the Google Privacy Policy.

We use Google user data only to provide and improve user-facing features you request. We do not use Google user data for advertising, and we do not sell Google user data.

Depending on how you use the Service, we may collect or process:

• Account data from Google Sign-In via Supabase Auth (for example, email address, display name, profile identifier, and session tokens stored in HTTP-only cookies).
• YouTube channel data you authorize through OAuth scopes: youtube.readonly, yt-analytics.readonly, and yt-analytics-monetary.readonly. This includes channel metadata (title, handle, thumbnails), playlist and video metadata (titles, IDs, durations), YouTube Analytics metrics (views, subscribers gained, watch time, retention-related metrics, average view percentage), and estimated revenue metrics when you grant monetary analytics access.
• Workspace data you create inside GGAnalytics, such as Content Planner ideas and series, Subscriber Optimization (SPM) CTA strategy notes (category and custom text per video), and related productivity metadata stored in our database.
• Derived analytics snapshots we cache in our database to reduce YouTube API quota usage (for example, SPM reports, Series Optimizer diagnostics, Series Valuator summaries, and playlist catalogs), typically refreshed on a rolling basis.
• Keyword Lab queries you submit. Keyword research may use our server-side YouTube Data API key. Normalized keyword results may be stored in a shared cache (fresh for approximately 24 hours, with stale fallback up to approximately 7 days) to improve performance.
• Billing and subscription data when you purchase Creator Pro: Stripe customer ID, subscription status, plan interval, and billing period dates. Payment card numbers are collected and processed by Stripe; we do not store full card numbers on our servers.
• First-party product analytics for signed-in users (for example, upgrade modal impressions and clicks) to understand feature usage and improve the Service. We do not use third-party advertising networks.
• Technical logs from our hosting provider (for example, request timestamps, IP address, and error diagnostics) necessary to operate and secure the Service.

We do not sell your personal information. We do not use third-party advertising networks in the Service, and we do not place advertising cookies on your device.

Our Chrome extension runs on YouTube Studio pages you open in your browser. When you connect the extension to your GGAnalytics account, it may store a session handoff token in extension storage, call our authenticated API endpoints (for example, to confirm your account and load SPM summaries), and help you apply bulk edits you initiate inside YouTube Studio (such as descriptions, pinned comments, and Shorts related-video settings).

The extension does not run on sites other than those required for YouTube Studio productivity features and connection to our app. Edits you make through the extension are performed in your YouTube Studio session under your control; we do not upload your video files to our servers.

• Authenticate you and maintain your session.
• Display channel, video, playlist, and analytics insights in dashboards and tools you request.
• Save your planner content, CTA annotations, and cached analytics snapshots tied to your linked channel.
• Process subscriptions, deliver paid features, and manage billing through Stripe.
• Measure product usage with first-party analytics to improve reliability and UX.
• Improve reliability, debug errors, prevent abuse, and comply with legal obligations.
• Respond to support or privacy requests you send us.

Application data is stored in a Supabase (PostgreSQL) database. The web application is hosted on Render. YouTube OAuth refresh and access tokens are encrypted at rest using an application encryption key before being stored in the database.

Row Level Security (RLS) policies in Supabase restrict workspace data so authenticated users can access data associated with their own account and linked YouTube channel(s). Authorized administrators may access limited operational data as needed to run and support the Service.

No security measure is perfect. You are responsible for keeping your Google account secure and for using the Service on trusted devices.

We share information only as needed to operate the Service:

• Google / YouTube — when you connect a channel or when our servers call YouTube Data API or YouTube Analytics API on your behalf using your authorized tokens.
• Stripe — payment processing, subscription management, and fraud prevention. See Stripe's privacy policy for how Stripe handles payment data.
• Supabase — authentication, database hosting, and related infrastructure.
• Render — application hosting.

Stripe's privacy practices are described at stripe.com/privacy.

We may disclose information if required by law, to protect rights and safety, or in connection with a merger or acquisition with appropriate safeguards.

California residents: We do not sell personal information as defined under the California Consumer Privacy Act (CCPA).

We use essential cookies and similar storage mechanisms to keep you signed in (Supabase session cookies). The Chrome extension may use browser extension storage for connection state. These are necessary for authenticated features. We do not use cookies for cross-site advertising or sell cookie data to third parties.

We retain account and workspace data while your account is active. Cached YouTube analytics payloads are refreshed periodically and may be retained for a limited window (for example, fresh cache windows on the order of 24 hours, with stale fallback windows up to approximately 48 hours) before being replaced by newer data. Keyword research cache entries may be retained up to approximately 7 days in stale form.

Billing records may be retained as required for tax, accounting, and dispute resolution after cancellation.

If you disconnect YouTube or delete your account, we will delete or de-identify associated data within a reasonable period, and in any event within seven (7) days of confirmed revocation or deletion request where applicable under YouTube API policies.

You can stop our access to your Google / YouTube data at any time by revoking GGAnalytics in your Google Account security settings:

Google security settings (third-party access)

Revoking access stops new API calls using your tokens. To request access, correction, or deletion of data we already stored, email [email protected]. We will respond to verified requests within a reasonable time and delete applicable stored API and workspace data within seven (7) days where required, subject to legal retention requirements.

If you are in the European Economic Area, United Kingdom, or other regions with data protection laws, you may have additional rights (such as portability or objection). Contact us at the email above to exercise those rights.

Some tools (for example, AdSense Calculator, Brand Deal Calculator, and Keyword Lab) can be used without signing in. Signed-in workspace features require a Google account. Subscriptions require you to be at least 18 years old (or the age of majority in your jurisdiction).

The Service is not directed to children under 13 (or the minimum age required in your country). We do not knowingly collect personal information from children. If you believe a child has provided us personal information, contact us and we will take appropriate steps to delete it.

If you access the Service from outside the United States, your information may be processed in the United States or other countries where our providers operate. Those countries may have different data protection laws than your jurisdiction.

We may update this Privacy Policy from time to time. We will post the revised version on this page and update the “Last updated” date. Material changes may be communicated through the Service where appropriate.

Marchant Technologies LLC — GGAnalytics

Questions or complaints about privacy practices: [email protected]