Privacy policy
This policy describes how ARK Sites accesses, stores, and uses Google account data when a website owner connects Google. It applies to the ARK Sites application at https://arksites.com. It was last updated on 18 October 2026.
What connecting Google does
A website owner can connect the Google account that already has access to that site's Search Console and Google Analytics. ARK Sites then shows search and analytics information for the property the owner selects. Connecting does not create a Search Console property, does not verify a site with Google, and does not add an Analytics tracking tag.
Google data ARK Sites requests
The connection asks only for these permissions:
- The email address of the Google account, so the site can show which account is connected.
- Read-only Search Console access, so the site can list the properties that account can already view and read search results for the property the owner selects. That includes queries, pages, clicks, impressions, click rate, and average position.
- Read-only Google Analytics access, so the site can list the Analytics properties that account can already view and read reporting for the property the owner selects. That includes users, sessions, key events, the channel a session came from, and page views.
ARK Sites does not request permission to change Search Console or Analytics settings, to manage Google Business Profile, or to read Gmail, Drive, Calendar, or other Google services.
How that data is used
The data is used to show the owner information about their own website inside ARK Sites. It is not sold. It is not used for advertising. It is not used to decide creditworthiness or for similar purposes. It is not used to train a general machine-learning model. It is not shared with another ARK Sites installation.
People operating ARK Sites do not read a customer's Google data except where the customer asks for support, where it is needed to keep the service secure, or where the law requires it.
Where it is stored
The website installation the owner signed in on stores the Google access token and refresh token, encrypted, in that installation's own database. It also stores the connected email address, the property the owner selected, and a copy of the latest report so the screen can be shown again. A stored report is replaced when the owner checks again.
Authorization is completed by the separate service at connect.arksites.com. That service holds the Google application secret. It does not store the refresh token, and it does not store Search Console or Analytics reports. It stores an identifier for the installation, the installation's address, and a hash of the refresh token, so one installation cannot refresh another installation's connection.
How long it is kept, and how to disconnect
The connection remains until the owner disconnects it in ARK Sites or removes ARK Sites from the Google account. Disconnecting deletes the stored tokens and reports from the installation, tells Google to revoke the token, and deletes the authorization record held by connect.arksites.com.
Questions
Questions about this policy can be sent through the contact form.