Privacy Policy

SantaStats (santastats.com) is a private marketing dashboard used internally by our team. It is not offered to the public, and only approved accounts can sign in.

Sign-in: when you sign in with Google, we receive your email address to check that your account is approved. When you sign in with a username and password, we store the username and a one-way hash of the password, never the password itself.

Connected marketing accounts: when an approved user connects a Google account, we request read-only access to Google Analytics, Google Search Console, and Google Ads, and store an encrypted token that lets the dashboard refresh that data. When a Meta Ads account is connected, we read campaign performance data from it.

Marketing data: we store aggregated performance metrics from those accounts, such as sessions, clicks, impressions, spend, conversions, and search queries, to display reports and recommendations.

We use this information only to show reports and recommendations inside the dashboard to approved users. We do not sell it, share it with third parties, or use it for advertising.

SantaStats's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

We use a single sign-in cookie to keep you signed in, plus a short-lived cookie during Google sign-in. We do not use tracking or advertising cookies.

Data is stored on our own server and served only over HTTPS. Google access tokens are encrypted at rest, and access to the dashboard requires signing in.

You can remove SantaStats's access to your Google account at any time at myaccount.google.com/permissions. To have your data deleted, contact us at the address below.

Questions about this policy: andrea@incubate.pro