Skip to main content

PRIVACY / DATA USE

Privacy Policy

This policy explains how the WhaleLeap Studio website and WhaleLeap GSC Reader handle information. We collect only what is needed to respond to inquiries, understand website use, and create authorized Search Console reports.

Last updated: September 6, 2026

Form information

Used to respond to reviews and project inquiries

Website analytics

Used to understand page and feature performance

Read-only GSC access

Used only for authorized website reports

1. Who handles this information

WhaleLeap Studio operates this website and WhaleLeap GSC Reader. For privacy questions or requests to access or delete data, email liaoshenyuan1999053@gmail.com.

2. Information handled by the website

When you submit the Free Shopify Review or contact form, we may receive your store URL, product category, target market, project stage, SKU count, budget, timeline, problem description, email, WeChat ID, submission page, referrer, and UTM parameters.

The form endpoint temporarily reads an IP address to limit repeated submissions and prevent abuse. The IP address is not included in inquiry emails or GSC reports. Your browser also stores a language preference locally to switch between the Chinese and English versions of the site.

3. Website analytics and service providers

When configured, the site uses Google Analytics and, in production, Vercel Analytics. These services may process page visits, referrers, device or browser information, approximate location, and on-site interaction events so we can understand performance and improve the experience. You can limit cookies or tracking in your browser and use Google's Analytics opt-out tool.

The inquiry form uses Resend to deliver submissions to WhaleLeap Studio. If you provide an email address, the system may also send a submission confirmation. We do not sell inquiry data or use it for marketing unrelated to your request.

4. WhaleLeap GSC Reader and Google user data

WhaleLeap GSC Reader is a free internal reporting tool used by the operator. Through Google's official OAuth 2.0 flow, it requests the read-only Search Console scope (webmasters.readonly) and accesses only Search Console resources available to the authorizing account.

The tool retrieves 28-day and 90-day clicks, impressions, CTR, average position, queries, pages, countries, devices, and sitemap submission status, then creates local JSON and CSV reports. It does not modify Search Console, websites, or Google Account data.

OAuth client credentials and refresh tokens are stored in an operator-controlled local environment and are not committed to Git. Generated reports remain in the local project directory. The current version does not automatically send Google user data to AI services, advertising platforms, data brokers, or paid SEO tools.

Google user data is used only to create and analyze authorized search performance reports. It is not sold, used for advertising, or shared with unrelated third parties. WhaleLeap GSC Reader's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

5. Purposes, retention, and sharing

We use information to respond to inquiries, assess Shopify projects, protect the form from abuse, understand website performance, and create authorized Search Console reports. Data is retained only as long as reasonably needed for these purposes, dispute handling, or legal requirements.

We do not share personal information except with providers needed for hosting, analytics, and email delivery. Those providers process necessary information under their own terms. If our handling of data changes materially, we will update this policy first and request renewed authorization where required.

6. Security, revocation, and data requests

We take reasonable measures to protect credentials, form information, and reports, but no internet transmission or storage method can guarantee absolute security.

You can revoke WhaleLeap GSC Reader access at any time from your Google Account's third-party connections page. You may also email us to request access, correction, or deletion of information you provided and related Google API data stored locally. We will process the request after verification.

7. Children and policy updates

This website and GSC Reader are intended for businesses and professional users, not children. Updates will be posted on this page with a revised date at the top.

PRIVACY / DATA REQUESTS

Need to access, delete, or revoke data?

Tell us which website, form submission, or authorized Google Account the request concerns so we can verify and process it. Do not send passwords, OAuth secrets, or refresh tokens by email.

Email us