PRIVACY POLICY
隐私政策 / Privacy Policy
What this application is
Search Console Dashboard is a private, single-operator dashboard hosted at gsc.kuvren.com. It displays Google Search Console performance and Google Analytics 4 traffic for the website properties that its operator already owns. It is not a public product and does not accept sign-ups from other users.
本看板是部署在 gsc.kuvren.com 的私人工具，仅供运营者本人查看自己名下网站的 Google Search Console 搜索表现与 Google Analytics 4 流量数据。它不是面向公众的产品，不接受其他用户注册。
Google user data accessed
With the operator’s explicit consent, this application requests the read-only scopes https://www.googleapis.com/auth/webmasters.readonly and https://www.googleapis.com/auth/analytics.readonly. It reads, and only reads, data for properties the authorizing Google account already has access to: Search Console site lists, clicks, impressions, click-through rate, average position, and query or page breakdowns; and Google Analytics 4 sessions, users, pageviews, engagement metrics, traffic sources, and top pages.
经运营者明确授权后，本应用仅申请 webmasters.readonly 与 analytics.readonly 两个只读权限，读取授权账号本就有权访问的数据：Search Console 的站点列表、点击、曝光、点击率、平均排名以及查询词与页面明细；Google Analytics 4 的会话、用户、浏览量、互动指标、流量来源与热门页面。不会写入、修改或删除任何 Google 数据。
How the data is used
Data is used solely to render charts and tables in this dashboard for the operator’s own analysis. It is not used for advertising, not sold, not used to train machine learning models, and not transferred to any third party.
数据仅用于在本看板中呈现图表与表格，供运营者本人分析。不用于广告，不出售，不用于训练机器学习模型，不转让给任何第三方。
Storage and retention
The only Google credential stored is an OAuth refresh token, kept in a Cloudflare Workers Secret. It never reaches the browser. Search Console and Analytics metrics are fetched on demand and held only in memory for the duration of a request; they are not written to a database, object storage, or logs. Access to the dashboard itself is gated by a password chosen by the operator.
唯一被保存的 Google 凭据是 OAuth refresh token，存放于 Cloudflare Workers Secret，不会发送到浏览器。Search Console 与 Analytics 指标按需实时拉取，仅在单次请求的内存中存在，不写入数据库、对象存储或日志。看板访问由运营者设定的密码保护。
Sharing
No Google user data is shared with third parties. The application makes no outbound requests other than to Google’s own OAuth, Search Console, and Analytics APIs.
不与任何第三方共享 Google 用户数据。除 Google 自身的 OAuth、Search Console 与 Analytics 接口外，本应用不向其他服务发起请求。
Revoking access and deleting data
The authorizing account holder can revoke access at any time at myaccount.google.com/permissions. Revoking access immediately invalidates the stored refresh token, and the dashboard stops being able to read Search Console data. No historical Search Console data is retained, so there is nothing else to delete.
授权账号可随时在 myaccount.google.com/permissions 撤销授权。撤销后已保存的 refresh token 立即失效，看板随即无法读取 Search Console 数据。本应用不保留任何历史数据，因此没有其他需要删除的内容。
Contact
Questions about this policy can be raised in the project repository: https://github.com/nykee/my-website-dashboard
对本政策有疑问，可在项目仓库提出：https://github.com/nykee/my-website-dashboard