Updated October 1, 2026. This service is for its configured owner only.
Google sign-in supplies a verified email address and account identifier to verify the owner. The service requests OpenID, email and read-only Search Console access. Google's permission covers properties accessible to that account. In owned mode this service checks Google's current siteOwner role before each property report, including future owned properties, and excludes full or restricted users. An explicit property allowlist can instead be configured. URL inspection targets must belong to the permitted property.
Search performance, site and sitemap information is fetched from Google to answer the owner's tool requests. Results are returned to the authorized MCP client, such as ChatGPT, where that client's data controls apply. Google credentials are never included in tool results.
The private server stores encrypted Google OAuth credentials and signing keys, login sessions, consent records, hashed MCP refresh tokens and an owner identifier. Search Console report results are not stored in this application's database. Google receives authentication and API requests; the configured hosting service stores the application and its database.
This server does not sell Google user data, use it for advertising, or use it to train AI models. It includes no third-party analytics. Application errors are sanitized rather than logging raw Google responses or credentials. Hosting and connected-client services have their own data practices.
The signed-in owner can choose Disconnect on the homepage to invalidate this service's MCP access and remove stored Google credentials and login sessions. The owner identifier remains to prevent another account taking over the service. Remove the app in the Google account's third-party connections to revoke the upstream Google grant. The owner controls private server backups and can delete them separately.
For questions or removal, contact the owner through the user support email displayed on Google's consent screen. Use of Google user data follows the Google API Services User Data Policy, including its Limited Use requirements.