Multi-AnalyticsPrivacy Policy
Multi-Analytics is a private, self-hosted dashboard that shows Google Search Console and YouTube statistics on one page. It is run by a single owner for their own websites and channels. It is not a public service, and nobody else can sign in to it.
What we access
When the owner connects a Google account, the dashboard asks Google for read-only access to:
- Google Search Console (
webmasters.readonly): site list, clicks, impressions, CTR, average position, and the top queries, pages, countries and devices. - YouTube Data API (
youtube.readonly): channel name and image, subscriber, view and video counts, and recent uploads with their view counts. - YouTube Analytics API (
yt-analytics.readonly): views, watch time, subscribers gained and lost, top videos and traffic sources. - Basic profile (
openid,email): your email address, used to check that you are allowed to sign in to the dashboard and to tell connected accounts apart.
The dashboard cannot change, post, delete or upload anything in Search Console or on YouTube.
How the data is used
The data is used only to show charts and tables on this dashboard to its owner. It is not sold, rented or shared with anyone. It is not used for advertising, and it is not used to train AI or machine-learning models.
The use and transfer of information received from Google APIs follows the Google API Services User Data Policy, including its Limited Use requirements. Use of YouTube data is also subject to the YouTube Terms of Service and the Google Privacy Policy.
What is stored, and where
- OAuth refresh token and the connected account's email and channel names. These are stored in Cloudflare Workers KV, so the dashboard can fetch statistics without asking you to sign in again. Tokens are never sent to the browser.
- Cached statistics: short-lived copies of API responses, which expire automatically within 6 hours.
- Live counter samples: YouTube view and subscriber counts recorded every 10 minutes. Older samples are deleted automatically after 8 days.
- Session cookie: one signed cookie that keeps the owner signed in to the dashboard for up to 30 days. There are no analytics, tracking or advertising cookies.
Data is sent only over HTTPS, between Google, Cloudflare (the hosting provider) and the owner's browser.
Removing access and deleting data
- Removing an account under Accounts → Remove deletes its stored token, revokes it with Google, and clears cached statistics.
- You can also revoke access at any time at myaccount.google.com/permissions.
- Any remaining cached data expires within 6 hours, and live samples within 8 days.
Children
The dashboard is not directed at children and does not knowingly collect data from them.
Changes
If this policy changes, the updated version will be posted on this page with a new effective date.