Legal
Privacy Policy
Last updated: June 2026
Summary
Keyword Matcher does not store any user data. Your Google data (Search Console and Analytics) is processed exclusively in working memory to generate the report and never leaves our server in stored form. We use Google Tag Manager with Google Analytics 4 for anonymous website analytics, for which we ask your consent via our cookie banner.
What Google data we access
Google Search Console Google Analytics 4After signing in with your Google account, we request read access to:
- Google Search Console โ keywords, clicks, impressions and positions for your website
- Google Analytics 4 โ organic sessions, conversions and revenue per landing page
We request read-only access exclusively. We cannot modify or delete anything in your accounts.
What we do with your Google data
- Data is processed in the server's working memory (RAM)
- Data is not stored in a database or file
- Data disappears when you close the session or sign out
- Data is not shared with third parties
- Data is not used for marketing or advertising purposes
Cookies & Google Tag Manager
Google Analytics 4 Consent Mode V2We use Google Tag Manager with Google Analytics 4 to anonymously track how visitors use the tool โ such as which pages are visited and whether the tool is used successfully. No personal data or business data is recorded.
We implement Google Consent Mode V2:
- Without consent: GTM loads but GA4 does not place cookies or record any data
- With consent: GA4 places analytical cookies and records anonymized usage
- We do not use advertising cookies, retargeting or third-party tracking pixels
- Your consent choice is saved and applies to future visits
You can change your consent at any time via the cookie settings or by clearing your browser data.
Google OAuth & access tokens
Your Google password never reaches our server. We use the standard OAuth 2.0 flow with PKCE security:
- You sign in via Google's own secure login page
- Google returns a temporary access token (not your password)
- This token is stored only in the browser session
- You can revoke access at any time via myaccount.google.com/permissions
Security
- All connections via HTTPS (TLS)
- Server hosted in the Netherlands (EU)
- Credentials are never logged or stored
- PKCE-secured OAuth flow
Contact
Questions about this privacy policy? thijs.joosten@tj-da.com
This privacy policy applies to keywords.tj-da.com and may be updated without prior notice.