Privacy Policy

Effective 16 October 2026

Nao Command (dash.gab44.com) is a private dashboard operated by Naoufal Chobah, an individual. This policy explains what data the app reads, how it is used and stored, and how to remove it. Contact: nchobah@gmail.com.

Data we access from Google

When the operator connects a Google account, Nao Command requests these read-only permissions:

• Google Analytics (analytics.readonly): lists the operator's Analytics properties and reads aggregated reports such as users, sessions, page views, top pages, traffic sources, countries and realtime active users.
• Google Search Console (webmasters.readonly): lists the operator's verified sites and reads search performance: clicks, impressions, click-through rate, position, top queries and top pages.
• YouTube (youtube.readonly) and YouTube Analytics (yt-analytics.readonly): reads the operator's own channel's public statistics, recent uploads, and channel-level views, watch time and subscriber changes.
• Basic profile (openid, email): the email address of the connected account, shown so the operator knows which account is connected.

The dashboard connection never writes, edits or deletes anything in Google services.

The operator can also connect a separate setup connection, used only to configure the operator's own sites, never for display:

• Google Analytics (analytics.edit): creates Analytics properties and web data streams for the operator's own websites.
• Google Search Console (webmasters): adds the operator's own websites and submits their sitemaps.
• Site Verification (siteverification): requests a verification token and verifies ownership of the operator's own domains through DNS.

The setup connection is stored separately from the dashboard connection and can be disconnected on its own at any time.

How the data is used

Google data is used only to display charts and figures to the operator inside the dashboard. It is not sold, not shared with or transferred to anyone, not used for advertising, and not used to train artificial intelligence or machine learning models.

Nao Command's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Storage and security

• The Google refresh token is stored on the operator's own server, in a file readable only by the dashboard service. It never reaches the browser.
• Report results are cached on that server so pages load instantly, and are overwritten with fresh data every few minutes.
• All traffic uses HTTPS. The dashboard requires a sign-in, and every Google permission is read-only.

Other data

The dashboard also reads aggregated figures from the operator's own systems: website traffic from Cloudflare, uptime checks, server health, and counts from the operator's products' databases through a read-only account. No personal data of website visitors or customers is displayed; only totals and trends.

Cookies

Nao Command sets one strictly necessary cookie that keeps the operator signed in. There are no analytics, advertising or tracking cookies.

Retention and deletion

Google data is kept only as the latest cached report. Pressing Disconnect on the Connections page revokes that connection at Google and deletes its stored token, and for the dashboard connection its cached Google reports, immediately. Access can also be revoked at any time from myaccount.google.com/permissions.

Changes

If this policy changes, the new version will be posted on this page with a new effective date.