YouAnalytics / Privacy
Privacy
YouAnalytics is a self-hosted WordPress plugin. This page describes what the plugin stores when you install it on your own site. It is not a substitute for Google’s or Composio’s policies.
Can a WordPress plugin store my Google password?
YouAnalytics does not. You sign in with Google via Composio. Tokens are not stored in WordPress. Setup: connect Google Analytics to WordPress.
Who processes what
When you click Continue with Google, sign-in and Analytics API calls go through Composio. YouAnalytics never stores Google passwords or OAuth tokens. The requested scope is analytics.readonly (read reports; no writes to Analytics).
Stored in WordPress
- Encrypted Composio API key, if you paste it in wp-admin (or you keep it in
ca-local.phpon the server) - Composio connection id
- Display name, PIN hash (if you set a PIN), and selected property ids
- An aggregated snapshot used to render the brief
Not stored by YouAnalytics
- Google passwords
- Google OAuth tokens
- Hit-level Analytics events
Your visitors
This plugin does not add a Google Analytics tag and does not collect visitor hits by itself. Collection happens only if you (or another plugin) already send data to GA4. Consent banners belong on those collecting sites, not in YouAnalytics.
Disconnect
Disconnecting Google in YouAnalytics drops the stored connection id and the aggregated snapshot used to render the brief. It does not delete your GA4 properties. Composio and Google keep their own records under their policies.
This documentation site
These pages are hosted on GitHub Pages. GitHub may process requests according to GitHub’s privacy statement. The pages do not set a first-party analytics cookie.
Source
Code: github.com/hlotiim/YouAnalytics. Security reports: see SECURITY.md.