Privacy Policy

Who we are

GA4 Health Check is an automated GA4 auditing tool operated by Native Ore Analytics. We can be reached at hello@nativeoreanalytics.com.

What we access

To run a GA4 audit, we request read-only OAuth access to your Google account with the following scopes:

• Google Analytics Read & Analyze — to query your GA4 property data via the Google Analytics Data API
• Google Analytics Edit — read-only access to your GA4 Admin configuration (property settings, streams, audiences). Despite the name, we use this scope only to read configuration — we never modify anything.

We use these permissions only to run your audit. We do not access any other Google services, Google Drive, Gmail, or data outside of your GA4 property.

What we store

We store the minimum necessary to operate the service:

• Your email address and name — from your Google account, used to identify your session and send you your report
• Audit job results — the findings and scores from your audit, stored temporarily (24 hours) so you can download your PDF report. Raw GA4 event data is never stored.
• Session tokens — a JWT token stored in your browser's localStorage to keep you signed in. Expires after 7 days.

We do not store your raw Google Analytics data. Query results are processed in memory to generate your report and then discarded.

What we never do

• We never modify, delete, or export your GA4 data
• We never sell or share your personal information with third parties for marketing purposes
• We never retain your GA4 raw event data beyond the audit session
• We never access GA4 properties you haven't explicitly selected for audit

How we use your information

Information we collect is used to:

• Run your GA4 audit and generate your report
• Send you your PDF report by email if requested
• Communicate service updates or important notices
• Improve the audit checks and product experience

Third-party services

GA4 Health Check uses the following third-party infrastructure:

• Google OAuth — for authentication and GA4 API access
• Railway — our backend hosting provider (United States)
• Netlify — our frontend hosting provider (United States)
• Redis — temporary session and job storage
• Stripe — payment processing. We never see or store your full card details.

Revoking access

You can revoke GA4 Health Check's access to your Google account at any time by visiting myaccount.google.com/permissions and removing GA4 Health Check from the list of connected apps. This immediately terminates our ability to access any of your Google data.

To delete your account data, email hello@nativeoreanalytics.com with the subject "Delete my data" and we will remove all stored information associated with your email address within 7 days.

Cookies and local storage

GA4 Health Check uses browser localStorage to store your authentication token and session preferences. We do not use third-party tracking cookies or advertising cookies. We do not use Google Analytics on our own site.

Data transfers

GA4 Health Check operates from servers in the United States. If you are located outside the United States, your information will be transferred to and processed in the United States. By using GA4 Health Check, you consent to this transfer.

Changes to this policy

We may update this privacy policy from time to time. We will note the date of the last update at the top of this page. Continued use of the service after changes constitutes acceptance of the updated policy.

Contact

Questions about this policy or your data? Email us at hello@nativeoreanalytics.com.