This policy covers this website, nathanthony.com, and Pepper-GoogleAds-MCP, a private tool I operate. In both cases, I'm Nath Ybañez, based in Cebu, Philippines. Questions go to nath@andar.ph.
This website
nathanthony.com sets no cookies, runs no analytics or tracking scripts, and has no forms.
The site is hosted on Cloudflare. To deliver and protect it, Cloudflare processes standard request data such as your IP address and browser type, as described in Cloudflare's privacy policy.
If you email me, I use your message and address only to reply to you.
Pepper-GoogleAds-MCP
Pepper-GoogleAds-MCP connects an AI assistant (Claude, made by Anthropic) to the Google Ads accounts I manage, so I can review performance and prepare changes in plain language. It runs on my own computer and isn't offered to the public.
Google data the app accesses
When a Google account signs in to the app, it asks for two permissions:
- Google Ads (auth/adwords): to read and manage the Google Ads accounts that Google account can access. This covers account names and IDs, campaigns, ad groups, ads, keywords, budgets, bids and performance metrics.
- Google Cloud (auth/cloud-platform): used only to send Google Ads API requests through the app's own Google Cloud project for quota. The app doesn't read or change any other Google Cloud resources.
The app doesn't access Gmail, Google Drive, contacts, calendars or any other Google data.
How the data is used
Google Ads data is used only to answer requests about those accounts: showing performance, explaining results, and preparing changes such as pausing a campaign or editing a budget, keyword or ad.
Every change is first shown as a preview of the current and new values, and is applied only after I explicitly confirm it.
Google user data isn't sold, isn't used for advertising, and isn't used to develop, improve or train AI or machine learning models.
Sharing
To answer a request, the Google Ads data involved is passed to Claude, the AI assistant, during that session. Anthropic processes it under its own privacy policy.
The data isn't shared with anyone else, except where the law requires it.
Storage and security
- The Google sign-in credential is stored in a file on my computer that only my user account can read.
- Google Ads data is fetched live from the Google Ads API when needed. It isn't copied into a database or stored on any server I run.
- A local log records each change the app applies: when it happened, the account name and ID, and the before and after values.
Removing access and deleting data
You can revoke the app's access at any time from your Google Account's Third-party apps & services page. Once access is revoked, the app can't reach your Google Ads data.
To have the stored sign-in credential or change-log entries for your accounts deleted, email nath@andar.ph. I'll delete them within 30 days.
Google API Services User Data Policy
Pepper-GoogleAds-MCP's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
Changes to this policy
If this policy changes, I'll update this page and its effective date.