Privacy Policy

Last Updated: December 2025

Introduction

dataLayer Builder ("we", "our", or "us") is a free development tool for dataLayer event testing and project management. This Privacy Policy explains how we handle information when you use our service.

Information We Collect

Authentication Information (Optional)

• Google OAuth: When you sign in with Google to save projects, we collect:
  • Your Google email address
  • Your Google profile name
  • Your Google profile picture (avatar URL)
  • A unique user ID assigned by Supabase Auth
• This information is used solely to associate your projects with your account
• Authentication is optional - you can use Sandbox, Journey, and Examples without logging in
• Only the Projects feature requires authentication

Project Data

• Project names, descriptions, and metadata you create
• Event data and code snippets you save
• All data is stored in a cloud database (Supabase)
• Projects are associated with your user ID when authenticated

Technical Information

• Browser type and version
• IP address (for database access logging)
• Usage data stored in browser localStorage

How We Use Your Information

• To provide the service and store your projects
• To enable project access via unique project keys (GUIDs)
• To improve the tool's functionality

Data Storage and Security

• Projects are stored in Supabase cloud database
• Authenticated projects are protected by Row Level Security (RLS) - you can only access your own projects
• Your Google OAuth credentials are managed securely by Supabase Auth
• Session tokens are stored securely in browser storage
• We never store your Google password
• Authentication data (email, name, avatar) is cached in browser localStorage for performance

Third-Party Services

• Supabase: Cloud database and authentication provider - see Supabase Privacy Policy
• Google OAuth: When you sign in with Google, Google's authentication services are used - see Google Privacy Policy
• Google Tag Manager: When you load GTM containers, Google's privacy policy applies
• Amplitude Analytics: We use Amplitude for anonymous usage analytics to improve the tool - see Amplitude Privacy Policy

Your Rights

• You can delete your projects at any time
• You own the data you create
• You can sign out at any time to end your authenticated session
• Authentication is optional - only required for saving projects
• You can delete your authentication data by clearing browser localStorage
• All your projects are automatically deleted if you delete your Supabase Auth account

Cookies and Local Storage

We use browser localStorage to save your preferences, UI settings, and authentication session. We don't use tracking cookies.

Data Retention

Your projects remain in the database until you delete them. There is no automatic deletion of inactive projects.

Changes to This Policy

We may update this Privacy Policy from time to time. The "Last Updated" date at the top indicates when changes were made.

Contact

For questions about this Privacy Policy, please contact us through the GitHub repository.

---

← Back to Application