JM’S Publisher Desk iOS App – Privacy Policy

Last updated: 9 September 2026

Publisher Desk (“the app”) is an independent iPhone and iPad application
that displays basic reports from Google AdSense, Google Search Console,
and Google Analytics. It is not affiliated with Google LLC.

1. Data Controller

The data controller is the developer of Publisher Desk.

Contact: privacy@julianmacias.com

2. Data We Process

The app may process:

  • The email address of the Google account you use to sign in.
  • OAuth 2.0 access tokens and refresh tokens.
  • AdSense reports (estimated earnings and related metrics).
  • Search Console reports (clicks, impressions, CTR, position, queries, and pages).
  • Google Analytics 4 reports (active users, sessions, realtime metrics, and the selected property or website).

Face ID or your device passcode is used only to unlock the app on your device.
Biometric data never leaves the device and is never sent to us or to Google.

3. How We Use Your Data

This data is used solely to:

  • Sign you in with Google (OAuth 2.0).
  • Display your own reports inside the app.
  • Protect local access with Face ID or the device passcode.

Your Google user data is not used for advertising,
retargeting, profiling, analytics SDKs, training of AI/ML models,
or sale to third parties. Use is limited to the user-facing features
described in this policy.

4. Where Your Data Is Stored

  • OAuth tokens are stored only in the iOS Keychain on your device.
  • Reports are requested from Google’s APIs when you open or refresh
    a screen, shown on the device, and are not written to a Publisher Desk
    server. The app does not operate a backend that stores your account,
    tokens, or metrics.
  • Google processes data according to the

    Google Privacy Policy

    when the app calls the AdSense Management API, Search Console API,
    Google Analytics Data API, and Google Analytics Admin API.

5. Data Protection Mechanisms (security)

We apply the following technical and organisational measures to protect
Google user data and other sensitive information:

  • Encryption in transit.
    All communication with Google APIs uses HTTPS / TLS.
    Tokens and report payloads are not sent in clear text over the network.
  • Encryption at rest.
    OAuth access and refresh tokens are stored in the iOS Keychain,
    which encrypts data at rest using the device passcode and, where
    available, the Secure Enclave. Tokens are not stored in UserDefaults,
    files, logs, or screenshots by the app.
  • No publisher backend.
    There is no Publisher Desk server that receives, stores, or processes
    your Google tokens or reports. A data breach of a central database
    of user reports is not applicable because that database does not exist.
  • Least privilege.
    The app requests only read-only OAuth scopes
    (adsense.readonly,
    webmasters.readonly,
    analytics.readonly,
    plus basic OpenID email/profile).
    It cannot change your AdSense, Search Console, or Analytics settings.
  • Local device lock.
    Optional Face ID / passcode unlocks the app on that device only.
    This lock does not transmit biometrics.
  • Session control.
    You can sign out in the app (tokens are deleted from the Keychain)
    or revoke access at

    Google Account → Third-party connections
    .
  • No third-party trackers.
    The app does not include advertising SDKs, crash reporters that upload
    Google report data, or analytics SDKs that receive your AdSense,
    Search Console, or Analytics content.
  • Confidentiality.
    Security procedures are in place to protect the confidentiality
    of your data. Access to the Cloud project that hosts the OAuth client
    is limited to the developer. We do not sell, rent, or transfer Google
    user data to data brokers or other third parties.

If we become aware of a security incident that affects tokens or Google
user data processed by the app, we will notify affected users at the
contact email above where we have a means to do so.

6. Legal Basis

Processing is based on your consent when you sign in with Google and on
performance of the service you requested (viewing your reports).
You may withdraw consent by signing out and revoking the app in your
Google Account.

7. Data Retention

OAuth tokens remain on your device until you sign out, switch Google account,
or uninstall the app. Signing out deletes tokens from the Keychain.
Uninstalling the app removes local app data according to iOS.
Cached figures on screen are discarded when you leave the session.

8. Data Recipients

We do not sell or share your Google user data. The only transmissions are
HTTPS requests the app makes to Google to retrieve the reports you authorised.
Recipients of those requests are Google’s API endpoints, under Google’s terms
and privacy policy.

9. Children

The app is not directed at children under 16.

10. Your Rights

You may request access, correction, deletion, restriction, or objection
by writing to privacy@julianmacias.com.
You can also sign out in the app and revoke permissions in your
Google Account.

Depending on your country or U.S. state, you may have additional rights
(for example under the GDPR or CCPA). Contact the address above to
exercise them.

11. International Transfers

Report data is retrieved from Google’s infrastructure.
The app developer is based in the European Union.
Because tokens and reports are stored on your device and not on a
Publisher Desk server, we do not operate our own cross-border database
of user reports.

12. Changes to This Policy

If this Privacy Policy changes, we will update the date at the top of this page.
Material changes will remain published at this URL. Continued use of the app
after a material change means you have been informed of the updated policy.