Privacy Policy
Last updated
This policy describes the private MetricsMaze workspace and this public information website. MetricsMaze is an owner-operated analytics tool, not a public social network or an open registration service. For privacy questions or deletion requests, contact robpenski@gmail.com.
Data accessed through Google and YouTube
When an authorized owner connects a channel, MetricsMaze uses the YouTube Data API and YouTube Analytics API with two read-only permissions: youtube.readonly and yt-analytics.readonly.
- Channel identifiers, titles, thumbnails and current channel statistics, including subscriber counts where available.
- Video identifiers, titles, thumbnails, duration, publication status and publication or scheduled publication dates, including non-public videos accessible to the authorized owner.
- Available channel and video analytics, including views, watch time, engagement totals, subscriber gains and losses, traffic-source categories and aggregate country reports.
- OAuth access and refresh tokens needed to read the authorized channel's data without asking for a Google sign-in on every report request.
MetricsMaze does not receive your Google password. Its YouTube permissions do not allow uploading or modifying videos, posting comments or changing your channel.
How the data is used
Connected data is used to display reports, compare reporting periods, summarize channels and support content calendars inside the private workspace. The owner can add ideas, campaign-link assignments and publication checklist records. YouTube data is not published on this information website.
MetricsMaze may also read product and revenue reports from separately configured services, such as PostHog, RevenueCat and app-store reporting APIs. These connections are independent of Google authorization. Google authorization does not grant access to unrelated products or accounts.
Storage and protection
Reports and workspace records are stored on infrastructure controlled by the operator. Access to the workspace is restricted. Stored Google OAuth tokens are encrypted at rest, and provider requests use HTTPS. Saved reports and content metadata are cached so that temporary provider failures do not erase the most recently available report.
Operational backups can contain earlier copies of saved data. This public information website is hosted separately on Cloudflare and has no access to the private workspace's database, OAuth tokens or source credentials.
Sharing and permitted use
Connected reports are available only within the private workspace to its authorized operator. Google processes authorization and API requests, and infrastructure providers process information needed to host and secure the service.
MetricsMaze does not sell Google user data, use it for advertising, share it with data brokers or use it to train generalized AI or machine-learning models. Data may be disclosed when necessary to operate the authorized features, investigate security issues or comply with applicable law.
MetricsMaze's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements.
Retention, disconnecting and deletion
Saved data is kept to provide the connected reporting and planning features. Selecting Disconnect for a YouTube channel removes its stored authorization and current report and content caches from MetricsMaze. It stops future requests through that connection.
Manual ideas, campaign-link assignments, publication checklist records and historical backups are separate records and may remain after disconnection. Contact robpenski@gmail.com to request their deletion, including retained backup copies, or ask about data held in the workspace. Requests may require confirmation that you control the affected channel or data.
You can also revoke Google's authorization through your Google Account connections. Revocation stops future authorized access; it does not by itself delete copies already stored in MetricsMaze. A fresh authorization is required to connect again.
This public website
These information pages do not use advertising, third-party analytics scripts or analytics cookies. Cloudflare processes technical connection information, such as IP address, browser information and request timing, to deliver and secure the website. The private workspace separately uses access-control cookies for sign-in.
Changes and contact
Changes to this policy will appear here with an updated date. A materially different use of Google data requires an updated disclosure and any necessary consent before that use begins.
Contact: robpenski@gmail.com.