Data policy

Scope requested: https://www.googleapis.com/auth/webmasters.readonly — read-only, enforced by Google.

Stored: click totals (28 day, 90 day, 12 month), year-over-year change, trend label, traffic band, top countries, count of pages receiving clicks, months of history, verification date.

Never stored: raw API responses, search queries, page URLs, client-property data, impressions, average position, CTR.

Refresh tokens are encrypted at rest and never logged or returned.

Search Console data lags roughly two to three days. Figures are always labelled with a verification date and never described as live.