Mike Rhodes' PMAX Spend Allocation Script

[Mihai Ciurea]

Do you know whether it sends data to any other place, other than the Google Sheets where you want your report generated? Does the script owner have access to your Google Ads' Account Data?

Can it be altered at a later stage to act maliciously?

[Nils Rooijmans]

if you are referring to this script https://github.com/agencysavvy/pmax/blob/main/v24

I can confirm:

- this script does not send data to any other data storage than your copy of the google sheet

- if you install this script in your Google Ads account, the script itself cannot be altered by the original author (only by people with access to your account)

NOTE: your copy of the Google Sheet also runs code. As far as I can tell,  the current version of this code does not send data to any other storage.

 

Hope this helps,

Nils Rooijmans
https://nilsrooijmans.com
See my Google Ads Scripts FAQ to avoid the same mistakes I made: https://nilsrooijmans.com/google-ads-scripts-faq/

[Mihai Ciurea]

Hello, Nils,

Nice to see a familiar face around here. I went through the script myself and could not see any function to send data outside the script - but I wanted to double check with someone else than ChatGPT on the matter. 

Many thanks,

Mihai

[Google Ads Scripts Forum]

Reposting the last inquiry (https://groups.google.com/g/adwords-scripts/c/2qjzsxKm7Xo) from the forum as it wasn't routed to our support queue.

Regards,
Google Ads Scripts Team

[Google Ads Scripts Forum]

Hi All,

Thank you for reaching out to the Google Ads Scripts Team. Please excuse us for only getting back now as your message failed to be routed to our support queue.

@Nils - Thank you for providing your insights to this.

@Mihai - It appears that this is the same concern as mentioned in a thread you've previously raised with the subject `(sephora.ro): scripts`. If you have not seen our team's response, then allow me to reiterate. Upon checking, there have already been multiple users that have reached out regarding this script and none have reported any malicious content or actions done by the script. The script only pulls data from your account and pushes information to a specified spreadsheet, as also mentioned by Nils.

As for your other concern, even if we do not know how malicious the mentioned acts go, owners of the script can supply their own spreadsheet and do with it as they please. However, spreadsheets are files which you'd need specific access. You can instead use a spreadsheet which you have visibility in so that sharing of access or current data can be monitored by you. You can also keep track of the spreadsheet being used, and monitor if it has been altered or changed to a different sheet.

If you'd have any further clarifications on this, kindly reach out to us in the aforementioned thread you've raised so that we can be able to have better tracking of the issues on our end.

Best regards,
Google Ads Scripts Team