Privacy Policy
OpenLab is an internal banner ad preview tool operated by Sky. This policy explains what data is accessed, how it is used, and how it is stored when you use the application.
Data We Access
Google Account
When you sign in with Google, OpenLab requests read-only access to your Google Sheets via OAuth 2.0. We receive a temporary access token from Google. We do not receive or store your Google account password.
Google Sheets Data
OpenLab reads data from Google Sheets spreadsheets that you provide. This data is used solely to populate and display banner ad previews within the application. We do not copy, store, or transmit this data to any external service.
How We Use Your Data
| Data | Purpose |
|---|---|
| OAuth access token | Authenticates requests to the Google Sheets API on your behalf. Stored in localStorage for the session only — never sent to our servers. |
| Spreadsheet content | Read in-session to populate banner ad previews. Discarded when the page is closed or refreshed — never stored or transmitted. |
Specific fields read from your spreadsheet:
- CTA — call-to-action text displayed on banners
- Legal_Copy — legal disclaimer text displayed on banners
- Project_Name / Project_ID — used to identify and label the preview
- Creative_Sizes — determines which banner sizes to render
- Click_Tag — destination URL for banner click-throughs
- Content_Data_JSON_Path — path to external content data for dynamic banners
- Video_Asset_Path — path to video assets used in banners
- Build_Paths / Images_Paths — paths to banner build files and image assets
Only the columns listed above are used. Any other columns present in the spreadsheet are ignored.
No data is used for analytics, advertising, or profiling.
Cookies
OpenLab does not use cookies. The only browser storage used is localStorage,
which holds your OAuth access token for the duration of your session. It is not used for
tracking or advertising purposes.
Your Rights
As a UK-based service, OpenLab is subject to the UK GDPR. Since OpenLab does not store any personal data on its servers, there is no retained data to access, correct, or delete. Your OAuth token exists only in your own browser and is cleared when you sign out or when it expires.
If you have questions about your rights or how Sky handles personal data more broadly, contact the OpenLab team at Sky.
Data Storage
Your OAuth access token is stored in your browser's localStorage for the duration of your
session. It is automatically cleared when:
- You sign out
- The token expires (typically after 1 hour)
No spreadsheet data is persisted. All data is loaded in-memory and discarded when you close or refresh the page.
Data Sharing
OpenLab does not share, sell, or transmit any user data or spreadsheet content to third parties. Data accessed via the Google Sheets API is used exclusively within the browser session that requested it.
Third-Party Services
OpenLab uses the following Google services:
- Google Identity Services — for OAuth 2.0 sign-in
- Google Sheets API — for reading spreadsheet data
Use of these services is governed by Google's Privacy Policy.
Hosting
OpenLab is hosted on Google App Engine. No user data or spreadsheet content is stored on the server. The application serves static files only.
Access
OpenLab is an internal tool intended for use by Sky employees and authorised collaborators only. Access is controlled via Google OAuth and a site passkey.
Contact
For questions about this policy, contact the OpenLab team at Sky.