Security and data
Exactly what TrafficClaw reads from your Google account, what we keep and how, what we never do, and how to take it all back.
Last updated:
Read-only
We can see your Analytics and Search Console data. Google will not let us change it.
Encrypted or hashed
Google tokens are encrypted in our database. AI connection tokens are stored only as hashes.
Yours to revoke
Remove our access in your Google account, or any connected AI app from Connect AI, at any time.
What we read
When you sign in, Google shows you these permissions and nothing else. Both data permissions are read-only. We also ask Google for offline access, so your portfolio can sync in the background when you are not signed in.
See your Google Analytics data
analytics.readonlyUsers, sessions, pages, channels, countries, devices and events for the GA4 properties your account can open, and the list of those properties.
See your Search Console data
webmasters.readonlyQueries, pages, clicks, impressions, CTR and position for the sites your account can open, the list of those sites, sitemaps and URL inspection.
Know who you are
openid email profileYour name, email address and profile photo, to sign you in.
Full scope names: https://www.googleapis.com/auth/analytics.readonly and https://www.googleapis.com/auth/webmasters.readonly.
What we store
From Google we only ever get totals, never individual visitors, and totals are all we keep of your Google data. The table also lists what you create in the app, such as dashboards and Ask chats. Each account’s data is kept separate, and every connection to TrafficClaw uses HTTPS.
| What | Why | Kept |
|---|---|---|
| Your account: name, email, profile photo, plan and Ask message balance | Why: To sign you in and run your plan | Kept: Until you delete your account |
| Google access and refresh tokens, encrypted at rest | Why: To read your data, including background syncs while you are away | Kept: Until you delete your account; they stop working as soon as you remove our access in Google |
| Daily totals per property and site: users, sessions, pageviews, key events, engagement rate, clicks, impressions, CTR and position | Why: So the portfolio opens instantly instead of waiting for Google | Kept: Up to the last 25 months (Analytics) and 16 months (Search Console), until you delete your account |
| Dashboards and their versions, share links, notes, goals, funnels and the tasks you mark done or dismiss | Why: The features you use | Kept: Until you delete them or your account |
| Ask conversations and the facts Ask remembers about your sites | Why: Chat history and context | Kept: Until you delete your account |
| Connected AI apps: which sites each app may see, token and API key hashes, and a log of tool calls without their results | Why: To check each request and show you the activity | Kept: Tokens until they expire or you revoke them; the log for 30 days |
| Weekly summaries of your sites | Why: The weekly report | Kept: 26 weeks |
| Your leaderboard profile, only if you list a site | Why: The public profile, with only the numbers you chose to show | Kept: Public until you pause it; kept until you delete it |
| Daily numbers for each site you list on the leaderboard | Why: The charts, trends and rankings on its profile | Kept: The last 190 days, while the site is listed |
| Google answers in memory | Why: Speed, and to spare your Google quota | Kept: A few minutes |
How tokens are protected
- Google tokens are encrypted before they are written to our database (Fernet: AES-128 with an HMAC-SHA256 check) and decrypted when we call Google for you.
- AI connections (ChatGPT, Claude and other MCP apps) get their own tokens, never your Google ones. We store only SHA-256 hashes of them. Access tokens last one hour; a refresh token lapses after 30 days without use, and every connection has to be approved again after 180 days at most.
- Personal API keys for Connect AI are shown once when you create them and stored only as hashes. You can have up to five at a time.
- Payments go through Dodo Payments. We keep your plan and subscription reference, never your card details.
What we never do
- Change anything in Google Analytics or Search Console. Our permissions are read-only, so Google would refuse.
- Ask for Gmail, Drive, Google Ads or any other Google data.
- Put a tracking script on your site, or ask you to.
- Sell your data, or share it with advertisers or data brokers.
- Use your Google data to train AI models, ours or anyone else’s.
- Publish anything about your sites unless you add a site to the leaderboard, and then only the numbers you choose.
- Send your email address, user IDs, IP addresses or visitor-level data to an AI app you connect.
- Keep AI connection tokens or API keys in a readable form. We store only their SHA-256 hashes.
Who else sees data
- Google answers our read-only requests for your Analytics and Search Console data.
- Google’s Gemini API, only when you use the built-in Ask chat: your question and the numbers needed to answer it.
- The AI app you connect (for example OpenAI’s ChatGPT or Anthropic’s Claude) receives the results of the tools it calls, for the sites you approved, under its own terms. You can hide your search queries from it when you approve it.
- Dodo Payments handles payments for paid plans.
- On our own website we use Google Analytics and Microsoft Clarity to see how trafficclaw.com is used, and Tawk.to for the support chat.
The privacy policy covers Google user data (Limited Use), the leaderboard and connected AI apps in full.
Revoke access
- 1
In your Google account
Open Google account permissions, pick TrafficClaw and remove access. Google then refuses our requests, background syncs included. You can connect again at any time.
- 2
In TrafficClaw
Settings › Google shows the account you connected and the permissions above. On the Connect AI page you can revoke one AI app, all of them, or a personal API key; they lose access within seconds.
- 3
Public links and the leaderboard
Switch off or reset a dashboard’s public link in its Share dialog. Pause or delete a leaderboard profile from the Leaderboard page in the app.
Delete your data
Ask for deletion in Settings › Data & privacy (it takes you to Delete account, which sends the request to our support inbox), or email [email protected]. On request, we delete your account and all the data stored with it.
You can also remove our access at any time in your Google Account; we can no longer read anything from Google after that.
Want a copy first? Settings › Data & privacy › Export my data downloads everything we keep about you as a JSON file. Your Analytics and Search Console data itself stays in Google.
Questions or a security issue
Email [email protected] or use the contact form. If you think you have found a vulnerability, please tell us before sharing it publicly.