Application β€” Google Search Console API

Search Performance &
Indexing Intelligence Tool.

Lead Lock Systems LLC uses the Google Search Console API to retrieve organic search performance data, indexing status, crawl health, and URL inspection results for verified website properties. User data is accessed only with explicit OAuth authorization from verified property owners.

πŸ”’This application operates under our Privacy Policy. Data accessed via OAuth is used solely to provide the service and is never sold or shared with third parties.
πŸ”‘

OAuth 2.0 Scopes Requested by This Application

https://www.googleapis.com/auth/webmastershttps://www.googleapis.com/auth/webmasters.readonly
Application Purpose

What this application does.

This tool is a web application developed and operated by Lead Lock Systems LLC that connects to the Google Search Console API via OAuth 2.0. It enables authorized property owners to view, analyze, and act on search performance and indexing data for websites they own and have verified in Google Search Console.

The application provides a unified dashboard that surfaces organic search metrics, keyword performance, index coverage issues, crawl errors, and URL-level inspection data β€” data that is already available to property owners inside Google Search Console, presented here in a format optimized for analysis and decision-making.

Access to Search Console data is granted exclusively by the property owner through Google's OAuth 2.0 authorization flow. The application never accesses any property without explicit user authorization, and access can be revoked at any time through the user's Google Account settings.

πŸ“ˆ

Search Performance Data

Retrieves clicks, impressions, click-through rate (CTR), and average position for queries, pages, countries, devices, and search appearance types over custom date ranges.

webmasters.readonly
πŸ”

Keyword & Query Analysis

Surfaces the top organic search queries driving traffic to a verified property, including performance breakdowns by device type, country, and search appearance (web, image, video, news).

webmasters.readonly
πŸ“„

Page-Level Performance

Retrieves organic performance metrics at the individual URL level, allowing property owners to identify top-performing pages and pages with declining visibility.

webmasters.readonly
πŸ—‚οΈ

Index Coverage & Status

Accesses index coverage reports to identify which pages are indexed, excluded, or blocked. Surfaces error types including server errors, redirect issues, and crawl anomalies.

webmasters.readonly
πŸ”Ž

URL Inspection

Uses the URL Inspection API to retrieve the live and indexed status of individual URLs, including last crawl date, canonical URL, mobile usability, and rich result eligibility.

webmasters.readonly
πŸ—ΊοΈ

Sitemap Management

Lists and retrieves submitted sitemaps for verified properties, including submission status, last downloaded date, and the number of URLs discovered versus indexed.

webmasters
πŸ“±

Mobile Usability

Retrieves mobile usability data for verified properties to identify pages with mobile rendering issues that may affect Google's mobile-first indexing evaluation.

webmasters.readonly
🌐

Verified Property List

Retrieves the list of Search Console properties that the authorized user owns or has access to, allowing them to select which property to analyze without manual input.

webmasters.readonly
⚠️

Crawl Errors & Anomalies

Surfaces crawl error data including 404s, soft 404s, server errors, and DNS errors detected by Googlebot during crawling of the verified property.

webmasters.readonly
Data Access & Transparency

Every piece of data this application touches.

Full transparency on every data type accessed, why it is accessed, whether it is stored, and what OAuth scope enables it. No data outside the scope of the table below is ever requested or processed.

Data Type
Purpose
Scope Required
Stored?
Search query data (clicks, impressions, CTR, position)
Core performance analytics displayed in the application dashboard for the authorized property owner.
webmasters.readonly
Session Only
Page-level performance metrics
URL-level breakdown of organic search performance to identify top and underperforming pages.
webmasters.readonly
Session Only
Index coverage status
Identifies pages that are indexed, excluded, or experiencing crawl errors across the verified property.
webmasters.readonly
Session Only
URL inspection results
Provides crawl status, indexing eligibility, canonical detection, and rich result status for individual URLs.
webmasters.readonly
Session Only
Sitemap submission data
Reads submitted sitemaps including discovery and indexing counts, submission date, and processing status.
webmasters
Session Only
Verified property list
Retrieves the list of Search Console properties the user is authorized to access so they can select a property to analyze.
webmasters.readonly
Session Only
OAuth access token
Short-lived token issued by Google after user authorization. Used server-side to authenticate API calls on behalf of the user. Never exposed to the browser or third parties.
OAuth 2.0
Encrypted
OAuth refresh token
Used to renew access without requiring repeated user login. Stored encrypted server-side only if the user enables persistent access. Revocable at any time via Google Account settings.
OAuth 2.0
Encrypted
Google Account email address
Used solely to identify the authorized user account associated with the session. Not used for marketing or shared with any third party.
openid / email
Session Only
Gmail, Drive, Calendar, Contacts or other Google data
This application does not request, access, or process any Google user data outside of Search Console properties. No other Google services are used.
Not Requested
Not Accessed
Permissions Breakdown

Exactly what this app can and cannot do.

We request the minimum permissions necessary to deliver the functionality of this tool. The breakdown below is explicit and exhaustive.

What We Can Read

  • Search performance metrics (clicks, impressions, CTR, position)
  • Query and keyword data for verified properties
  • Page-level organic performance data
  • Index coverage reports and error breakdowns
  • URL inspection results for individual pages
  • Submitted sitemap data and indexing counts
  • Crawl error and anomaly reports
  • Mobile usability data
  • List of Search Console properties authorized by the user
  • Rich result eligibility data per URL

What We Can Write (with full scope)

  • Submit or resubmit sitemaps on behalf of the property owner
  • Delete sitemaps on behalf of the property owner

What We Cannot Do β€” Ever

  • Access Gmail, Google Drive, Calendar, or any non-Search Console data
  • Access properties the user has not authorized
  • Modify or delete any search performance data
  • Access data from any property after authorization is revoked
  • Share, sell, or transfer Search Console data to any third party
  • Use data to serve advertising or build user profiles
Application Flow

Step-by-step: how this application works.

The following describes the complete flow from the moment a user accesses the tool to when data is displayed and the session ends.

01

User Initiates Authorization

The user clicks β€œConnect with Google” and is redirected to Google's OAuth 2.0 authorization screen. At this point, no data has been accessed. The user reviews the requested permissions and either grants or denies access.

02

Google Issues Authorization Code

Upon user approval, Google redirects back to our application with a short-lived authorization code. This code is exchanged server-side for an access token and, if applicable, a refresh token. Tokens are never exposed to the client browser.

03

Property List is Retrieved

The application calls the Search Console API to retrieve the list of properties the user has access to. The user selects which property to analyze.

04

Performance & Index Data is Fetched

Based on the selected property and chosen date range, the application queries the Search Analytics API, Index Coverage API, and URL Inspection API using the user's access token. All requests are made server-side.

05

Data is Displayed to the User

API responses are parsed and rendered into the application dashboard. The user sees their own Search Console data β€” the same data available to them directly inside Google Search Console β€” presented in our interface.

06

Data is Not Retained After Session

Search performance data retrieved during the session is not stored in our databases. Each session loads fresh data directly from the Google Search Console API. Cached results, if any, are discarded within 24 hours.

07

User Can Revoke Access at Any Time

The user can revoke this application's access at any time via their Google Account permissions page and removing Lead Lock Systems LLC from authorized applications. Upon revocation, all stored tokens are immediately invalidated.

Compliance & Policy

Our compliance commitments.

Google API Services User Data Policy

This application's use of Google API Services, including data obtained via the Search Console API, strictly adheres to the Google API Services User Data Policy, including the Limited Use requirements. Data is used solely to provide and improve the functionality of this tool.

Limited Use Compliance

Data obtained through Google API Services is used only to provide the features described on this page. We do not use this data to develop, improve, or train generalized AI or ML models, serve advertising, or transfer data to third parties except as necessary to operate this application and only with user consent.

Privacy Policy

All data handling related to this application is governed by the Lead Lock Systems LLC Privacy Policy. As stated in that policy, we do not sell, trade, or monetize user data of any kind. Users may request deletion of any retained data by contacting contact@leadlocksystems.io.

Minimum Scope Principle

This application requests only the OAuth scopes necessary to deliver its stated functionality. We request webmasters.readonly as the primary scope and webmasters only where sitemap submission functionality is enabled. No additional Google API scopes are requested under any circumstances.

Data Deletion & Retention

Users may request full deletion of any data associated with their account by contacting contact@leadlocksystems.io. Retained tokens are deleted immediately upon revocation through Google Account settings. Session data is discarded automatically and not retained beyond 24 hours.

Terms of Service

Use of this application is subject to the Lead Lock Systems LLC Terms of Service. Users must be the verified owner or authorized delegate of any Search Console property they connect to this application. Unauthorized use of third-party properties is strictly prohibited.

Questions

Questions about this application?

If you have questions about what data this application accesses, how your Search Console data is handled, or how to revoke access, contact Lead Lock Systems LLC directly.

contact@leadlocksystems.ioΒ Β Β·Β Β  Lead Lock Systems LLC, 312 W 2nd St, Unit #A9309, Casper, Wyoming 82601, United States