1. Operator and scope
MintTrail Metrics is operated by MAJID HARIADI. Contact: choirullasharii1999@gmail.com. This policy applies to this website, the associated Google OAuth authorization process, and the authorized internal advertising report service.
2. Data we access
With the account holder's consent, we use read-only Google AdMob access to retrieve app information and aggregated advertising performance data for the corresponding publisher account. This may include app names and identifiers, dates, estimated earnings, ad requests, matched requests, impressions, and clicks. We use these figures to calculate eCPM, match rate, show rate, and click-through rate.
To maintain authorization, we store the necessary OAuth client configuration, access token, and refresh token. We do not ask the account holder to provide a Google password. The public website does not display the account's report data.
3. How we use data
We use this data only to update, display, filter, and export internal advertising reports; maintain authorization; troubleshoot synchronization; and protect the service. Reports are available only to the account holder and designated internal operations personnel. We do not sell data obtained from Google APIs or use it for advertising targeted at external users.
4. Storage and sharing
Authorization credentials are kept on a collection server with restricted access. Aggregated report data may be transferred over a protected connection to an internal report database, where authorized personnel can view or export it. Hosting and infrastructure providers may process necessary data to provide their services. We do not disclose this data to unrelated third parties except as authorized, legally required, or necessary to provide infrastructure.
Visits to this website may generate necessary hosting or network security logs, which are handled under the applicable hosting provider's logging practices.
5. Retention
While authorization is valid and the service remains in use, we retain the data and credentials needed for internal reports. After receiving notice that the account holder has revoked authorization, or a verified deletion request, we stop collecting new data for that account. We delete its stored OAuth authorization credentials within 7 days, its data in the online report database and raw report files within 30 days, and any remaining backup copies containing that data within 45 days. Routine database backups rotate on a 14-day cycle. Necessary security and troubleshooting logs follow the infrastructure's log-retention rules and are not used to restore deleted report data.
6. Revoking access and requesting deletion
The account holder can revoke this tool's access in the third-party connections settings of their Google Account. Once revoked, we cannot collect new data using that authorization. Revocation at Google does not automatically remove previously stored data from our database or backups. Please also notify us at choirullasharii1999@gmail.com to start the deletion process described above. To request access to, correction of, or deletion of existing data and authorization credentials, email us with the relevant publisher account and request details. We verify the requester's authority over that account before processing the request.
7. Updates and contact
If the data scope, purposes, or handling practices materially change, we will update this page and its effective date. For questions about this policy, contact choirullasharii1999@gmail.com.
Last updated: November 5, 2026.