Tracking Connector Privacy Policy

Effective 19 October 2026. Operated by Thriven Media. Contact: aaron@thrivenmedia.com.

What the connector is

A private tool used only by Thriven Media's authorized operator to read and change Google Tag Manager, Google Analytics 4 and Microsoft Clarity settings, read Google Search Console, PageSpeed Insights and Chrome UX Report data, and read Google Ads reports and manage Google Ads conversion actions for accounts that the operator's Google logins can access.

Data it accesses

Google Tag Manager accounts, containers, workspaces, tags, triggers, variables and versions; Google Analytics 4 configuration, audiences, Google Ads links and reports; Microsoft Clarity dashboard data; Google Search Console search analytics, URL inspection results and sitemaps; PageSpeed Insights and Chrome UX Report results for public URLs; Google Ads accounts, reports and conversion actions. Data is accessed only when the operator asks for it.

Data it stores

• Google refresh tokens for the operator's linked logins, encrypted at rest.
• A short-lived cache of which linked login can access which account or property.
• An audit log of changes made through the connector: time, tool, target ids and result.
• A short-lived Search Console site map (which linked login can see which property, kept one hour) and daily URL inspection counts per property (kept two days).
• A short-lived Google Ads account map (which linked login can reach which account, kept one hour), Google Ads operation counts for the last 24 hours, and the last Google Ads API access status.

Search Console, PageSpeed Insights, Chrome UX Report and Google Ads data are read on request and returned to the operator; they are not stored beyond those maps and counters.

The connector does not collect personal data about website visitors.

Sharing

Data is not sold or shared. It is processed on Cloudflare, which hosts the connector, and sent only to Google and Microsoft APIs to carry out the operator's requests.

Google API data

Tracking Connector's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Retention and removal

Tokens are deleted when a login is unlinked. Access can be revoked at any time at myaccount.google.com/permissions. Audit log entries are kept as a record of changes.