What we can and can't see

Connecting an advertising account to a tool you've just met is a reasonable thing to hesitate over. This page states exactly what we access, what we change, and what we never touch.

In your Google Ads account

✓ What we access

Campaign names, status, and budgets
Clicks, impressions, and spend
Google's own invalid-click figures
Search terms that triggered your ads
Click identifiers (gclid) for the last 90 days
Existing IP exclusion lists

✗ What we never touch

Your billing details or payment methods
Creating, pausing, or editing campaigns
Budgets and bids
Your ad copy or creatives
Other Google services — Gmail, Drive, Analytics
Any account you have not explicitly connected

The only change we ever make is adding or removing IP addresses on the exclusion list of campaigns you have nominated — and only after you turn blocking on. Until then we are strictly read-only. You can see every planned change before it is applied.

On your website

Only if you choose to install the optional measurement tag.

✓ What the tag records

Which ad click brought the visitor
Browser, screen size, timezone, language
Graphics renderer and a canvas-derived hash
How many mouse movements and keystrokes
How far the page was scrolled, and time on page
IP address and its network operator

✗ What it never records

Anything typed — names, phone numbers, emails, messages
Form contents of any kind
Screen or session recordings
Activity on any other website
Cookies or browser storage
Payment or financial details

On keystrokes. We count them; we do not record which keys were pressed. Counting is what separates a person filling a form from a script that types nothing. The content is never sent, so a phone number entered on your enquiry form cannot reach us even in principle.

What our verdicts actually mean

We say	It means	It does not mean
High risk	The click's characteristics closely match automated or repetitive non-genuine traffic	That we know who clicked, or that fraud is proven
Suspicious	Some signals are unusual and worth a look	That the visitor was not a real customer
Repeat device	A device with the same configuration returned several times	That it is a specific person or a named competitor

We never name an individual or a company as responsible for a click, because the data does not support that claim — and a tool that pretends otherwise is guessing.

Withdrawing access

Revoke at any time from Google Account permissions. Access stops immediately. Exclusions we already applied stay in your account and remain yours to remove — we do not hold your account hostage.

Questions? support@ghostclicks.in · Privacy Policy · Terms