Privacy policy

Effective 15 October 2026

This policy applies to the private OpenGSC dashboard at seo.mzrdrains.com and this information site. The installation is operated by Michael Burrows. Contact: [email protected].

Google data accessed

When an authorised user connects Google, the installation requests basic account identity (name, email address and profile information), read-only Google Search Console access and read-only Google Analytics access. Depending on the properties available to that account, reports may include site identifiers, search queries, pages, clicks, impressions, click-through rates, average positions, traffic and engagement metrics.

How the data is used

Data is used to authenticate authorised accounts, connect the operator’s data sources, synchronise reports and analyse the performance of websites the operator manages. OAuth tokens allow the installation to retrieve permitted reports without repeatedly requesting sign-in.

Google user data is not sold, used for advertising or used to train general-purpose AI or machine-learning models. Any optional AI integration must be reviewed separately before sending Google-derived report content to that integration.

Storage and safeguards

Dashboard records, synchronised reports and OAuth credentials are stored on the operator’s self-hosted system and may be included in its backups. Access is restricted using Cloudflare Access and the dashboard’s authentication. The application listens on the server’s loopback interface and is reached through a Cloudflare Tunnel. Credentials and private reports are not published on this information site.

Service providers and disclosure

Google supplies identity and reporting APIs. Cloudflare provides hosting for these public information pages and provides DNS, HTTPS, access control and tunnel connectivity for the dashboard. These services process the connection and authentication information necessary to provide their functions. Data may also be disclosed when legally required. No additional data sharing is authorised by this policy.

Retention and deletion

Connected account details and synchronised reports are retained while needed for the operator’s analysis, until the operator deletes them. Backups may retain copies until they are rotated or deleted. Revoking Google access stops future authorised retrieval but does not automatically erase reports already stored locally. Contact the operator to request removal of account records, reports or retained backup copies.

Your control over access

You can review or revoke this application’s permissions through Google Account connections. You may also contact the operator to disconnect an account or request deletion. Revocation may prevent further synchronisation.

Cookies and logs

The private dashboard and Cloudflare Access use cookies needed for sign-in and session security. The services may record operational and security logs, such as connection metadata and errors. These public information pages do not include analytics scripts, advertising trackers or a contact form.

Google API Limited Use

This installation’s use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including its Limited Use requirements.

Changes and contact

This page will be updated when relevant data practices change. For privacy enquiries or deletion requests, email [email protected].