Access and collection
What we can and can’t see
Connecting an advertising account to a tool you’ve just met is a reasonable thing to hesitate over. This page states exactly what we access, what we change, and what we never touch.
In your Google Ads account
What we access
- Campaign names, status, and budgets
- Clicks, impressions, and spend
- Google’s own invalid-click figures
- Search terms that triggered your ads
- Click identifiers (gclid) for the last 90 days
- Existing IP exclusion lists
What we never touch
- Your billing details or payment methods
- Creating, pausing, or editing campaigns
- Budgets and bids
- Your ad copy or creatives
- Other Google services — Gmail, Drive, Analytics
- Any account you have not explicitly connected
The only change we ever make is adding or removing IP addresses on the exclusion list of campaigns you have nominated — and only after you turn blocking on. Until then we are strictly read-only. You can see every planned change before it is applied.
On your website
Only if you choose to install the optional measurement tag.
What the tag records
- Which ad click brought the visitor
- Browser, screen size, timezone, language
- Graphics renderer and a canvas-derived hash
- How many mouse movements and keystrokes
- How far the page was scrolled, and time on page
- IP address and its network operator
What it never records
- Anything typed — names, phone numbers, emails, messages
- Form contents of any kind
- Screen or session recordings
- Activity on any other website
- Cookies or browser storage
- Payment or financial details
On keystrokes. We count them; we do not record which keys were pressed. Counting is what separates a person filling a form from a script that types nothing. The content is never sent, so a phone number entered on your enquiry form cannot reach us even in principle.
What our verdicts actually mean
| We say | It means | It does not mean |
|---|---|---|
| High risk | The click’s characteristics closely match automated or repetitive non-genuine traffic | That we know who clicked, or that fraud is proven |
| Suspicious | Some signals are unusual and worth a look | That the visitor was not a real customer |
| Repeat device | A device with the same configuration returned several times | That it is a specific person or a named competitor |
We never name an individual or a company as responsible for a click, because the data does not support that claim — and a tool that pretends otherwise is guessing.
Withdrawing access
Revoke at any time from Google Account permissions. Access stops immediately. Exclusions we already applied stay in your account and remain yours to remove — we do not hold your account hostage.
See also: why we never block a shared IP. Questions? support@ghostclicks.in · Privacy Policy · Terms