Privacy Policy
Last Updated: 2026-10-10
McPY values your privacy. This policy explains what information we collect, how we use it, and how we protect it.
Information We Collect
We may collect information such as email addresses and inquiry content during service use. Anonymized usage data may be collected for analytics purposes.
Purpose of Use
Collected information is used for service delivery, customer support, and service improvement. We do not sell or share it with third parties without authorization.
Cookies and Tracking
We may use cookies and similar tracking technologies to improve service quality. You can disable cookies in your browser settings.
Information Security
We take appropriate technical and administrative security measures to protect your personal information.
Policy Changes
This policy may be updated, and changes will be communicated through service announcements.
Firemap Google User Data
Requested permissions and purposes
Firemap requests https://www.googleapis.com/auth/tagmanager.readonly on the initial GTM connection to retrieve tag, trigger and variable definitions, compare event definitions and create review drafts. It requests https://www.googleapis.com/auth/tagmanager.edit.containers incrementally only when you select “Add GTM editing permission” on an existing connection. This enables creating or updating variables, triggers and tags in the selected workspace under a plan approved by a project owner or analysis administrator. Firemap does not publish or delete GTM resources.
Data received and account identifiers
Firemap receives GTM account, container and workspace names and IDs, tag, trigger and variable definitions, and version and fingerprint information for change detection. It stores selected target names and IDs, connection status and permissions. Imported event definitions are stored in Firemap drafts and versions; apply plans and execution history include required resource definitions, names and IDs. This GTM OAuth flow does not separately request or store the connected Google account’s email, profile or OpenID identifier. Connection records do store the user ID and email of the signed-in Firemap user who made the connection.
Storage and access restrictions
Refresh tokens are stored as AES-256-GCM ciphertext bound to the project and key version in a separate server-only table. Access tokens are used during API calls and are not stored. Project screens and data require project membership; only owners or analysis administrators can manage connections and write to GTM. Regular users and anonymous users cannot read the encrypted token table. Human access through project screens is limited to authorized project members; the server processes data for connection, comparison and apply features.
Retention, disconnection and deletion requests
Selecting “Disconnect” in the project’s GTM connection card attempts Google token revocation, then deletes the connection row and encrypted refresh token row. The Firemap connection row is deleted even if Google revocation fails. If the tool reports a revocation failure, remove access in your Google account’s third-party app settings. Disconnecting does not delete imported event definitions, drafts, versions, comparison run records, apply plans or history. No automatic expiry or time-based deletion is implemented for these records; they are deleted with the project. Send data deletion requests to mcpysup@gmail.com.
Sharing and usage restrictions
Google user data is not sold or used for advertising. There is no feature that shares raw GTM definitions, account identifiers or tokens with other apps. Service data is stored in Supabase, and approved changes are sent to the Google GTM API. When Telegram notifications are configured, difference counts or failure reasons, the Firemap project name and a review link are sent to the configured chat. These notifications exclude raw GTM definitions, account or container numbers and tokens.
Firemap's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
Google API Services User Data Policy
Firemap data deletion and privacy inquiries: mcpysup@gmail.com
Contact
For inquiries about our privacy practices, please contact hello@mcpy.kr.