Privacy Policy.

Badger Sheets is an Amazon PPC bulk-file audit tool operated by Ad Badger, based in Austin, Texas, USA. This policy covers sheets.adbadger.com and the audit tools served from it.

Ad Badger’s other products are covered by the policy at adbadger.com/privacy-policy. Where the two differ for Badger Sheets specifically, this page governs.

Your email address. Badger Sheets has no passwords at all. You sign in with a one-time link sent to your email, so your address is the account. You can optionally give a first name, which we use only to address you in the product and in email.

Your bulk file and the audit built from it. When you upload a bulk file to your account, we store the file and the audit derived from it — campaign and ad group names, keywords and product targets, search terms, ASINs and SKUs, and the associated spend, sales, clicks, orders and impressions. This is your business data. We treat it as yours.

Your agreement. We keep a record of when you ticked the box on an email form: the date and time, the version of the Terms you accepted, which form it was, and that you chose to join the Ad Badger newsletter. Until you click the sign-in link, that record is keyed by the same one-way hash of your email as the security records below; once you click it, it is copied onto your account.

Security records. To stop brute-force and abuse of the sign-in link, we record each attempt. We do not store your IP address or email in readable form for this — both are one-way hashed with a secret key before they are written down. The stored value can be matched against a repeat attempt but cannot be turned back into your IP or your address.

Product usage. Which pages you open and which features you use, via PostHog and Google Analytics. PostHog is tied to your account only after you give us your email; before that it is anonymous. Google Analytics runs through the Ad Badger website’s Google Tag Manager container, described under Cookies and Tracking below. We deliberately strip sign-in tokens out of every URL before it reaches analytics, and Tag Manager does not load on the sign-in pages at all.

Support conversations. If you use the chat widget, your messages and email address go to our support inbox.

Some of our tools run entirely inside your browser, and this is a real technical boundary rather than a promise about what we choose to look at.

The in-browser audit viewer at /local parses and audits your file in a Web Worker on your own machine. The file is never uploaded, and no result is transmitted. You can run it with your network disconnected.

The free audit and n-gram tools on the homepage and at /ngram also parse your file in your browser — the file itself is never uploaded. To be precise about the part that does leave: when you enter your email to unlock the full report, the report (not the file) is sent to us and held so we can attach it to your account once you click the sign-in link. Until you verify, that record is keyed by a hash of your email rather than the address itself.

We use what we collect to:

• run your audit and show you the results;
• send your sign-in link and tell you when an audit has finished;
• send you the Ad Badger newsletter you joined when you ticked the box, until you unsubscribe;
• keep your audit history available across your devices;
• protect the service from abuse, bots, and sign-in attacks;
• understand which parts of the product get used, so we can improve them;
• answer you when you contact support.

We do not use your campaign data to advertise to you, and we do not use it to train machine-learning models.

Badger Sheets compares your account against benchmarks built from other audits. This is worth explaining exactly, because it is the one place your numbers contribute to something other people see.

Benchmarks use only headline ratios — ACOS, ROAS, CTR and conversion rate — grouped into broad spend tiers. No campaign name, keyword, search term, ASIN, SKU, account identifier or email is ever part of a benchmark, and no benchmark can be traced back to an individual account.

A benchmark is only returned when at least 20 accounts sit in that group. Below that threshold the product shows nothing rather than a number that could describe a small enough set of accounts to identify one. Audits in currencies other than USD are excluded from the pool entirely.

We do not sell your personal information, and we never have. We do not share your campaign data with other customers, with Amazon, or with advertisers.

We use a small number of vendors to run the service. Each processes data only to provide their piece of it:

• Supabase — database, authentication and file storage. Your account, your audits and your uploaded files live here.
• Vercel — application hosting and delivery.
• Inngest — the background queue that runs your audit after upload.
• Resend — delivery of sign-in links and audit-ready notifications.
• PostHog — product analytics.
• Google — Google Tag Manager and Google Analytics, through the Ad Badger website’s container, for site analytics shared with adbadger.com.
• ActiveCampaign — Ad Badger’s email and customer system. We send it your email address, your first name if you gave one, the date you signed up, your last sign-in, the date of your last audit, and, because the box you ticked joins the Ad Badger newsletter, your newsletter subscription and the date you opted in. This happens both when you sign in and in a periodic sync of every account, so Ad Badger can follow up with you about your audit and send you the newsletter. Your bulk files and audit results never go there.
• Google (Gemini API) — the model behind “Ask The Badger”, the chat preview on your audit report. When you ask it a question, your question, the conversation so far, and the parts of your audit needed to answer are sent to Google’s Gemini API to generate the reply. We use its paid tier, on which Google acts as our processor and does not use your questions or its replies to improve its products. Google keeps them for a limited time, only to detect misuse of its service and for any legal or regulatory disclosures it is required to make. We keep no transcript of the chat: it lives in your browser tab and is gone when you reload. The only record we keep is a count of messages per account per day, for rate limiting, deleted after seven days.
• Cloudflare — bot protection on the sign-in and email forms.
• Chatwoot — the support chat widget.

We may also disclose information where we are legally required to, or to protect our rights or the safety of others. If Ad Badger is ever acquired or merged, your data would transfer with the business, and this policy would continue to apply until you were told otherwise.

Audits are kept until you delete them. Your history stays available so you can compare an account over time.

The raw bulk file you upload is deleted 30 days after the audit completes. The audit itself, every finding and every figure, is stored separately and is not affected. Nothing reads the original file once the audit is done, so keeping it longer would only mean holding your campaign names, ASINs and spend for no reason.

Deleting an audit removes both the audit record and the underlying bulk file from storage. It is immediate and it is not recoverable, so delete deliberately.

Sign-in security records — the hashed IP and email described above — are kept only to enforce rate limits and investigate abuse. A report parked at email capture is deleted as soon as you claim it by clicking your sign-in link.

You can close your account yourself from the bottom of your audits page. Type DELETE to confirm, and your account, your audits, your uploaded files and any generated bulk sheets are removed immediately and irrecoverably. The only thing that remains is the hashed sign-in security record described above, so a deleted account cannot be used to reset the sign-in rate limit.

You can access, correct, export or delete your data. Most of it you can do yourself: your audit history is on your audits page, and each audit can be deleted from there.

For anything else — a full export, account deletion, or a question about what we hold — email thebadger@adbadger.com. We will respond within 30 days.

To leave the Ad Badger newsletter, use the unsubscribe link at the bottom of any issue, or email us. Your Badger Sheets account is not affected either way.

If you are in the EU or UK, our basis for processing is performance of our contract with you (running the audit you asked for) and our legitimate interest in keeping the service secure and improving it. You may withdraw consent, object to processing, request portability, and complain to your supervisory authority.

If you are in California or another US state with a privacy statute, you have the right to know what we collect, to delete it, to correct it, and to opt out of the sale or sharing of it. We do not sell personal information. The advertising pixels described under Cookies and Tracking can count as “sharing” for cross-context behavioral advertising under California law; to opt out, use Your Privacy Choices in the footer, block them as described there, or email us. We will not discriminate against you for exercising any of these rights.

To opt out of product analytics or the marketing tags, open Your Privacy Choices in the footer of any page and switch them off; the audit tools work either way. An ad blocker or your browser’s tracking protection works too, and so does emailing us. We honour the Global Privacy Control browser signal as an opt-out of marketing and advertising. To be straight with you about a thing many policies fudge: we do not currently detect the Do Not Track header, so please use one of the routes above rather than assuming it stopped us.

We use a cookie to keep you signed in. That one is strictly necessary — without it the app cannot tell it is still you between pages.

PostHog, our product analytics, uses your browser’s local storage rather than cookies.

If you visit from the European Economic Area, the United Kingdom or Switzerland, a banner asks before product analytics or the marketing container load, and nothing beyond the essentials runs until you choose. Everywhere else both run by default. Wherever you are, Your Privacy Choices in the footer opens the same switches, and your choice is kept in a cookie for a year.

Badger Sheets also loads the Ad Badger website’s Google Tag Manager container, the same one that runs on adbadger.com, so that a visit here and a visit there read as one visitor. That container sets Google Analytics cookies on adbadger.com and loads the advertising and visitor-identification tags the website uses: Google Ads, the Meta Pixel, the LinkedIn Insight Tag, the Reddit Pixel, and Albacross, a service that estimates which company a visit comes from. The advertising tags can be used to show you Ad Badger ads on those networks. None of them receive your campaign data or anything from your bulk files, and the container does not load on the sign-in pages, so your sign-in link never reaches any of them. To opt out, block them with your browser’s tracking protection or an ad blocker; the audit tools work either way.

Everything is served over TLS. Your data is isolated at the database level so one account cannot read another’s, uploaded files are reachable only through short-lived signed links, and there are no passwords to steal because we never set any. Sign-in attempts are rate-limited and bot-checked.

No system is perfectly secure, and we will not pretend otherwise. If you believe you have found a vulnerability, please write to thebadger@adbadger.com — we would rather hear it from you than from an attacker.

Badger Sheets is a business tool and is not intended for anyone under 16. We do not knowingly collect information from children. If we learn that we have, we delete it.

When this policy changes we update the date at the top of the page. If a change meaningfully affects how we handle data you have already given us, we will tell you by email rather than relying on you to re-read this page.

Ad Badger
Austin, Texas, USA
thebadger@adbadger.com