1. Introduction
CookieScript provides a Google Data Studio Community Connector that enables users to access and visualize their CookieScript consent analytics data within Google Data Studio.
This Privacy Policy explains how the CookieScript Google Data Studio Connector ("Connector") accesses, processes, transfers, and handles information when users connect their CookieScript accounts to Google Data Studio.
The Connector is designed to retrieve aggregated cookie consent analytics and make them available for reporting and visualization.
2. Information Provided by Users
To configure the Connector, users provide the following information:
Item ID: A unique identifier associated with a CookieScript cookie banner.
API Token: An authentication token generated through CookieScript, used to authorize requests to the CookieScript API.
Date Range: The selected reporting period for which analytics information is requested.
The Item ID and API Token are entered directly into the Connector's configuration interface within Google Data Studio.
The Connector uses these values to retrieve analytics data for the specified CookieScript banner.
Users can update their configuration to connect to a different cookie banner or use a different API token.
3. Information Accessed Through the CookieScript API
The Connector retrieves aggregated analytics information from the CookieScript API, including:
Cookie Banner Statistics
Number of banner displays.
Number of banner acceptances.
Number of banner rejections.
User Interaction Statistics
Accept button interactions.
Reject button interactions.
Read More interactions.
Banner close interactions.
Manage Settings interactions.
Total tracked interactions.
Cookie Category Statistics
Functionality cookie consent counts.
Targeting cookie consent counts.
Performance cookie consent counts.
Unclassified cookie consent counts.
Consent Rates
Cookie acceptance rates.
Cookie rejection rates.
Cookie ignore rates.
Daily Analytics
Aggregated consent statistics organized by date.
The Connector is designed to process and return aggregated reporting metrics.
It does not request or return individual visitor consent records, visitor names, email addresses, IP addresses, or individual browsing histories as part of its reporting dataset.
4. Google User Data and Permissions
The Connector operates using Google Apps Script and the Google Data Studio Community Connector framework.
Google authorization may be required to execute the Connector and allow it to communicate with the CookieScript API through external HTTPS requests.
The Connector's application code does not request or retrieve:
Google Drive files.
Gmail messages.
Google Sheets document contents.
Google Calendar events.
Google Analytics account data.
Google account profile information.
The Connector does not use Google account data to authenticate requests to CookieScript.
Instead, authentication with the CookieScript API is performed using the API token entered by the user in the Connector configuration.
Google may process technical information, authorization details, configuration values, and other service-related information as part of operating Google Data Studio and Google Apps Script, according to Google's applicable policies.
5. How Information Is Used
Information accessed through the Connector is used to:
Authenticate requests to the CookieScript API.
Identify the cookie banner selected by the user.
Retrieve analytics data for the requested reporting period.
Transform aggregated analytics into metrics supported by Google Data Studio.
Display consent statistics, interactions, and trends in user-created reports and dashboards.
The Connector performs read-only requests to the CookieScript API.
It does not modify CookieScript account settings, cookie banner configurations, visitor consent records, or other account information.
The Connector's application code does not use retrieved analytics for advertising, marketing, individual visitor profiling, or unrelated purposes.
6. API Token Handling and Authentication
The CookieScript API token is provided by the user through the Google Data Studio Connector configuration interface.
The Connector reads the configured token when processing analytics requests and transmits it to the CookieScript API through an HTTPS request using an Authorization header.
The token is not included in the analytics metrics returned to Google Data Studio reports.
The Connector does not implement a separate credential database or custom persistent storage mechanism for API tokens.
However, because the token is entered as a Connector configuration parameter, its processing and retention within Google Data Studio and Google Apps Script are subject to Google's applicable platform functionality and policies.
Users should treat API tokens as confidential and limit access to data source configuration settings to trusted individuals.
Users may replace a configured API token or revoke it through the available CookieScript account controls.
7. Data Sharing and Disclosure
The Connector communicates with the CookieScript API to retrieve requested analytics information.
Retrieved analytics data is returned to Google Data Studio so that users can create reports, dashboards, and visualizations.
Information may therefore be processed by:
CookieScript: To authenticate API requests and provide the requested consent analytics.
Google Data Studio and Google Apps Script: To execute the Connector, process configuration parameters, retrieve reporting data, and display the information in reports.
The Connector's application code does not independently transfer retrieved analytics to unrelated third-party services.
The Connector does not sell analytics data or use it for third-party advertising.
Users control how they create, manage, and share their Google Data Studio reports and data sources, subject to Google's applicable access controls.
8. Data Storage and Retention
The Connector's application code does not implement a separate database or persistent storage system for retrieved CookieScript analytics.
Analytics information is requested from the CookieScript API when the Connector processes a data request from Google Data Studio.
The Connector does not independently create permanent copies of the retrieved analytics data.
Google Data Studio and Google Apps Script may process, cache, store, or retain report data, configuration information, credentials, and operational information according to their applicable policies.
The original CookieScript consent analytics remains subject to CookieScript's applicable data retention practices.
The Connector does not independently establish or modify the retention periods for information held by CookieScript or Google.
9. Data Security
The Connector communicates with the CookieScript API using HTTPS.
API tokens are transmitted in the Authorization header of requests rather than as URL query parameters.
The Connector does not intentionally include API tokens in the analytics data returned to Google Data Studio.
The application code does not implement separate persistent storage for analytics data.
When API requests fail, the Connector may process API error responses and provide diagnostic information through the Google Apps Script Community Connector error-handling mechanism.
Google's infrastructure may process or retain related operational and diagnostic information in accordance with its applicable policies.
Users are responsible for protecting their API tokens and managing access to their Google Data Studio data sources and reports.
10. User Controls and Data Deletion
Users can stop retrieving CookieScript analytics through the Connector by removing the associated data source from Google Data Studio.
Users may also:
Update the Item ID associated with a data source.
Replace the configured CookieScript API token.
Revoke or regenerate their API token through CookieScript.
Remove reports or data sources that use the Connector.
Manage Google authorization and access permissions through available Google account controls.
Removing a Google Data Studio data source does not automatically delete the underlying analytics information stored by CookieScript.
It also does not necessarily remove information already included in other reports or retained within Google's infrastructure.
Requests regarding CookieScript analytics retention or deletion can be directed to CookieScript through its available privacy or support channels.
11. Third-Party Services
The Connector relies on Google Data Studio and Google Apps Script to operate.
Use of these services is also subject to Google's applicable terms and privacy policies.
Users can review Google's privacy practices at:
https://policies.google.com/privacy
Google's applicable data protection terms may vary according to the Google Data Studio service and account type being used.
CookieScript is not responsible for the independent privacy practices or data handling policies of Google.
12. Changes to This Privacy Policy
CookieScript may update this Privacy Policy to reflect changes to the Connector's functionality, applicable legal requirements, or data processing practices.
Continued use of the Connector following changes to this policy is subject to the applicable terms and legal requirements.