Privacy Policy

Effective date: September 14, 2026

This Privacy Policy explains how Shot Keyword Screener (the “Application”) accesses, uses, stores, and shares information. The Application is a private tool used to access read-only Google Ads keyword-planning and performance-reporting capabilities.

Information we process

• Google account and Google Ads data: OAuth credentials needed to access an authorized Google Ads account, the account identifier, submitted keyword phrases, optional seed-page URLs, forecast settings, location queries, report dates and filters, and returned planning or performance data. Performance data may include account, campaign, ad-group, ad, keyword, search-term, budget, impression, click, cost, and conversion information.
• Authentication information: GitHub profile information made available during sign-in, which may include the username, display name, and email address.
• Technical information: limited request, security, and error information that may be processed in infrastructure logs to operate and protect the Application.

How information is used

Information is used only to authenticate authorized users, obtain the planning metrics or performance reports they request, present results, maintain security, diagnose failures, and comply with applicable law. The Application does not use Google user data for advertising, user profiling, credit decisions, or training general-purpose artificial-intelligence models.

Sharing and disclosure

The Application does not sell or rent personal information or Google user data. Information is disclosed only to service providers needed to run the Application—principally Google for Google Ads API requests, GitHub for authentication, and Cloudflare for hosting and security—or when required by law. These providers process information under their own terms and privacy policies.

Storage and retention

Google OAuth credentials are stored as encrypted Cloudflare Worker secrets and are retained until they are replaced, revoked, or deleted by the Application administrator. OAuth authorization state is stored only as needed to complete and secure sign-in. Submitted keywords, report filters, and returned results are not intentionally stored in an application database. Limited operational logs may be retained by the hosting provider according to its configured retention practices.

Security

Access is invitation-only. The Application uses OAuth, encrypted secrets, access controls, and HTTPS. No method of transmission or storage is completely secure, so absolute security cannot be guaranteed.

Your choices and deletion

You may revoke Google access at any time from your Google Account connections. GitHub authorization can be revoked from GitHub account settings. An authorized user may request deletion of Application-held authorization information by contacting the administrator who granted access to the Application. Revoking access prevents future API calls but does not control copies that a third-party provider must retain for legal or security purposes.

Children

The Application is intended for business use and is not directed to children under 13.

Changes

This policy may be updated when the Application or applicable requirements change. The effective date above will be revised when material changes are made.

Contact

For privacy questions or deletion requests, contact the Application administrator through the same channel by which access to this private Application was granted.