Burst Statistics offers an optional integration with Google Search Console. You can choose to connect your Google account so that your own search-performance data is shown inside your Burst dashboard. This connection is entirely optional and is only established after you explicitly authorize it.
What access we request. When you connect, we request a single, read-only scope: https://www.googleapis.com/auth/webmasters.readonly. This is the most limited Search Console scope Google offers and grants view-only access.
What data we access, and why. Using this read-only access, the integration retrieves only:
- the list of Search Console properties your Google account has access to, solely to automatically match the property that corresponds to your website; and
- the Search Analytics (search performance) data for that one matching property — specifically the search queries, clicks, impressions, click-through rate and average position.
This data is used for one purpose only: to display your site’s own search performance to you within your Burst dashboard.
What we do not access. The integration is read-only and cannot create, modify, or delete anything in your Search Console account or settings. It does not request or access any other Google data or service — including Gmail, Google Drive, Google Ads, Google Analytics, your contacts, or your Google profile beyond what the OAuth sign-in inherently provides. It does not access data for properties that do not match your website.
Where your data is stored. Both the Google access/refresh tokens and the retrieved search-performance data are stored exclusively on your own server: the tokens are encrypted in your WordPress installation, and the search-term data is stored in your own WordPress database. Nothing related to this integration is transmitted to, stored by, or retained on systems controlled by Burst Statistics B.V.
Our connection relay. Located at search-console.burst-statistics.com. Only connect using this domain. To complete the OAuth sign-in securely, the authorization flow passes through a relay service operated by Burst Statistics B.V. (so that Google’s confidential client secret never has to live on individual WordPress sites). This relay only facilitates the Google sign-in and the refreshing of your access token. It is stateless: it does not store your tokens, does not store your Search Console data, and at no point gives Burst Statistics B.V. access to that data.
No access for Burst Statistics B.V. As a result of the above, Burst Statistics B.V. has no access to your Google account, your tokens, or your Search Console data. The data remains under your control, on your website, at all times.
Revoking access. You can disconnect the integration at any time from the Burst settings, which deletes the stored tokens from your server and revokes them at Google. You may also revoke access directly from your Google Account under “Third-party apps & services.”
Limited Use compliance. Burst Statistics’ use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.