PubVista Privacy Policy
PubVista is a private reporting dashboard that shows publishers their own Mediavine and Google AdSense earnings. This privacy policy explains which data PubVista reads from those services, how it is stored and protected, how long it is kept, and how to have it deleted. PubVista never sells data or uses it for advertising.
Effective October 17, 2026. Operator: PubVista. Contact: support@pubvista.com.
Data PubVista Reads From Google AdSense
PubVista reads AdSense reporting data only after the account owner connects AdSense and grants read-only access. It requests a single Google permission, https://www.googleapis.com/auth/adsense.readonly, which allows viewing AdSense data and nothing else.
What PubVista Reads
- The AdSense accounts the grant can see: account name, publisher ID, reporting timezone and currency.
- The sites in those accounts and their status, so the owner can choose which sites to import.
- Report figures for the chosen sites: estimated earnings, page views, ad impressions, clicks and the related rates such as Page RPM, CTR, CPC and Active View.
What PubVista Does Not Read or Change
- PubVista does not request your Google profile, email address, contacts or any other Google service.
- PubVista cannot change AdSense settings, ads, sites or payments; the permission it holds is read-only.
- PubVista does not read the content of your websites or the personal data of their visitors.
How Google User Data Is Used
Data received from Google is used only to show the account owner their own AdSense reports inside PubVista. It is not sold, not shared with third parties, not used for advertising and not used to train any model.
PubVista's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
Data From Mediavine
Mediavine figures come from the Mediavine Publisher API through the personal access token a workspace owner or admin connects. The token is read-only, is stored encrypted (AES-GCM) and is never shown again; disconnecting deletes it. PubVista reads revenue, traffic and breakdown reports for that workspace's Mediavine sites and uses them only to display those reports.
How Data Is Stored and Protected
All data is stored in a Cloudflare D1 database used only by PubVista, and the service runs on Cloudflare Workers. Access to the dashboard requires the owner's password, and every page is served over HTTPS.
- Google access and refresh tokens are encrypted with AES-256-GCM before they are stored; the encryption key is a server secret that is never shown or logged.
- Tokens are used only on the server and never sent to the browser.
- Request logs that would record web addresses are switched off, so authorization codes are not written to logs.
Cookies
PubVista sets only first-party cookies that are strictly necessary for it to work. It uses no analytics, advertising or tracking cookies.
mvr_session: keeps the owner signed in to the dashboard.mvr_oauth: a temporary cookie, valid for ten minutes, that protects the Google connection step.
Data Retention and Deletion
Report data is kept until the owner asks for it to be deleted, so that past periods stay available for comparison. Google tokens are kept only while AdSense is connected.
Disconnecting Google AdSense
Disconnecting AdSense on the Integrations page revokes PubVista's access at Google and deletes the stored tokens immediately. Access can also be removed at any time from your Google Account's security settings under third-party connections.
Requesting Deletion
To delete all stored AdSense or Mediavine data, email support@pubvista.com. The data is removed within 30 days and the request is confirmed by email.
Changes and Contact
When this policy changes, the effective date at the top of this page is updated. For questions about this policy or your data, contact support@pubvista.com.