Privacy Policy

What this policy covers

WebsiteMaster is a website-performance reporting service. This policy describes how we handle account information, optional Google and Bing authorization, and the reports created from selected resources. For the exact provider scopes and data categories, see Data & Permissions.

Information we process

• Account data: the name, email address, authentication identifiers, and session information required to create and secure your account.
• Authorized provider data: the read-only Search Console, GA4, and Bing Webmaster data for resources you choose to add, including search performance, traffic, engagement, query, page, country, device, and event aggregates.
• Service data: sync status, cached reports, export requests, and limited security or operational logs.
• Optional analytics data: aggregate WebsiteMaster product usage only after you opt in through the Cookie Policy controls.

Why we use it

We use this information to authenticate you, discover and match resources, cache and display reports, protect the service, and provide support. WebsiteMaster does not sell provider data or use it for advertising.

Authorization and sharing

Product sign-in is separate from Google and Bing authorization. Google authorization covers read-only Search Console and GA4 scopes; Bing authorization is a separate read-only connection. We do not request permission to publish content, alter provider settings, manage ads, or read your email.

We use service providers necessary to operate WebsiteMaster, such as hosting, database, authentication, and email. Authorized Google and Bing reporting data is processed only by the hosting and database infrastructure needed to deliver the reports you request. We do not sell it, use it for advertising, or disclose it for generalized model training. We disclose information when required by law or to protect the service and its users.

WebsiteMaster's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements.

Retention and your controls

Cached reporting data is retained for up to 180 days. OAuth credentials remain only while the corresponding connection is active and are stored server-side; the browser does not receive provider access tokens. You can disconnect a source, delete your account, or request help as described in Data Deletion. Disconnecting removes the corresponding local credentials and cached reports.

Security and updates

We use reasonable technical and organizational safeguards, including server-side credential storage and access controls. No Internet service can promise absolute security. We may update this policy as the service changes; the current version is published here.

WebsiteMaster is operated by XUN JUNJIE (荀俊杰), an individual developer in China. For privacy questions or requests, email support@websitemaster.dev.