1. Scope and purpose

This policy applies to the private application that connects a self-hosted OpenPanel instance to Google Search Console. The application is operated for personal analytics and is not offered as a public service.

2. Google user data accessed

The application requests the read-only Google Search Console scope https://www.googleapis.com/auth/webmasters.readonly. Depending on the connected account and properties, it may access:

• Search Console property names, URLs, and permission levels.
• Search queries and pages associated with connected properties.
• Clicks, impressions, click-through rates, and average search positions.
• OAuth access tokens and refresh tokens needed to maintain the connection.

The application does not request permission to modify Search Console properties or data.

3. How information is used

Google user data is used only to:

• Display search-performance reports in the private OpenPanel dashboard.
• Synchronize and update historical Search Console performance metrics.
• Support private analysis of pages, queries, and search visibility.
• Maintain and troubleshoot the authorized integration.

The information is not used for advertising, profiling unrelated to the connected properties, or training public machine-learning models.

4. Storage and security

OAuth credentials and imported Search Console information are stored in the operator's self-hosted OpenPanel environment. OAuth tokens are encrypted at rest using OpenPanel's configured encryption key. Access to the dashboard is restricted through authentication and project permissions, and network traffic is protected with HTTPS.

Reasonable administrative and technical safeguards are used, but no storage or transmission method can be guaranteed to be completely secure.

5. Sharing and disclosure

Google user data is not sold, rented, or shared for advertising. Information may be processed by Google APIs and by infrastructure providers solely as needed to host, secure, and operate the private application. It may also be disclosed when required by applicable law or necessary to protect the security of the application.

6. Retention and deletion

Information is retained only for the operator's ongoing analytics needs. Disconnecting Google Search Console stops future synchronization but may not automatically delete previously imported performance data. Stored tokens and imported data can be manually removed from the self-hosted environment.

To request deletion or ask about retained data, contact [email protected].

7. Your choices

Access can be revoked at any time from the Google Account permissions page. Revocation prevents future access but does not by itself remove data previously imported into OpenPanel.

8. Cookies and public-site telemetry

This public information site does not include analytics scripts, advertising technology, or third-party fonts. The private OpenPanel application may use strictly necessary cookies to maintain authenticated sessions and protect the OAuth flow.

9. Google API Services User Data Policy

The application's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements.

10. Changes to this policy

This policy may be updated to reflect changes to the application or legal requirements. The effective date at the top of this page will be updated when material changes are made.

11. Contact

Questions about this policy or the handling of Google user data may be sent to [email protected].