Marsad Connect — Privacy policy

Last updated 3 November 2026

What Marsad Connect is

Marsad is a free, open-source WordPress plugin that shows a website's statistics in its own admin area. Marsad Connect is the small service at this address that lets a Marsad site connect a Google account with one click. Its source code is public at github.com/alahdal262/marsad (folder server/connect).

What we access

When a site owner presses "Connect with Google", Google asks them to allow read-only access to:

Marsad never asks for permission to change anything in these services.

What we keep

Nothing. After Google approves, this service passes the access tokens to the WordPress site that started the sign-in (proven with a one-time secret only that site holds) and deletes them within five minutes, or at once when the site collects them. Later, when the site needs a fresh access token, it sends its refresh token here; we forward it to Google with our client credentials and return the answer without storing it. We do not log tokens, statistics or e-mail addresses.

The statistics themselves go directly from Google to the owner's website and are stored only in that website's own database.

Use of Google user data

Marsad's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. The data is used only to show the owner their own statistics. It is not sold, not used for advertising, and not shared with anyone else.

Removing access

Press "Disconnect Google" in Marsad → Connections, or remove "Marsad" at myaccount.google.com/permissions. Either one ends access at once.

Contact

Questions or requests: open an issue at github.com/alahdal262/marsad/issues.

سياسة الخصوصية — مَرصَد كونكت

«مَرصَد» إضافة ووردبريس مجانية ومفتوحة المصدر تعرض إحصاءات الموقع داخل لوحة تحكمه. و«مَرصَد كونكت» خدمة صغيرة على هذا العنوان تتيح للموقع ربط حساب جوجل بضغطة واحدة.

ما نطلبه: قراءة فقط لإحصاءات Google Analytics وSearch Console ويوتيوب وتقارير Google Play، وعنوان البريد لعرض «متصل بحساب …». لا نطلب أي صلاحية تعديل.

ما نحتفظ به: لا شيء. نسلّم رموز الوصول للموقع الذي بدأ الربط ونحذفها خلال خمس دقائق على الأكثر، ولا نسجّل الرموز ولا الإحصاءات ولا البريد. الإحصاءات تذهب من جوجل إلى موقعك مباشرة وتُحفظ في قاعدة بياناته وحده.

إلغاء الوصول: زر «افصل جوجل» في الإضافة، أو من myaccount.google.com/permissions.