Privacy notice.
Effective October 30, 2026 · Shadow Stats at stats.shadowmediagroup.com
This notice describes how the private Shadow Stats dashboard, operated by Shadow Media Group, uses Google reporting data and information needed to provide dashboard access.
Google information the dashboard uses
When the website owner connects a Google account, the dashboard requests read-only Google Analytics and Google Search Console access. It retrieves the available account/property names and identifiers, website domains, and report data for the configured websites and page paths.
Reports include Analytics users, sessions, page views, engagement and key events, plus Search Console clicks, impressions, click-through rate and average position. The information is used to display reports, compare periods, and organize website and city-page performance. The connection does not request permission to edit Analytics settings, manage advertising, or change Search Console permissions.
Access and storage
Reports are available to the authorized WordPress owner account and people who have the website password. Password holders can view the configured reports and maintain the website list. The owner is responsible for keeping that password private.
Google connection credentials and authorization tokens are stored on the website’s server in WordPress settings. The dashboard does not store your Google account password. The website password is stored as a password hash rather than readable text.
Report responses are cached for up to 15 minutes. Website settings, property mappings and connection credentials remain stored until the owner removes or replaces them. The hosting service processes the requests needed to serve the website and may retain information under its own service and backup policies.
Cookies and login protection
A necessary session cookie can keep the dashboard unlocked for up to eight hours. Password-based sessions are invalidated when the website password changes. Temporary failed-login counters expire after 15 minutes. WordPress and the hosting service may also use cookies needed for administration and security.
Use and sharing
The dashboard uses Google data only for the reporting functions described here. It does not sell that data or use it for advertising. Reports are not made public. Anyone given the website password can see the configured reports, so access should be limited to intended users.
Google provides the reporting services under its own policies. The dashboard’s requests to Google are limited to the authorized read-only services and configured report requests.
Revoke access or remove stored information
The owner can revoke the Google connection from Google Account third-party connections. Revocation prevents new authorized requests. Cached reports expire automatically after up to 15 minutes; removal of the saved dashboard configuration and connection credentials can be requested from the website owner.
For questions about this dashboard or requests to remove its stored configuration, contact the website owner through Shadow Media Group.