Last updated: 4 November 2026
This policy explains what data the SagaPilot WordPress plugin and its sign-in service handle, and why. SagaPilot is made by Roger (NetworkSaga) in Sweden. Contact: privacy@networksaga.com.
In short
- SagaPilot only asks Google for read-only access to Search Console and Google Analytics, plus your email address.
- Your statistics go directly from Google to your own WordPress site and are stored there. They never pass through our servers.
- We do not sell data, show ads, build profiles or use your data to train AI models.
- You can disconnect at any time, and deleting the plugin removes everything it stored.
Google data the plugin accesses
When you click “Connect Google” and approve access, SagaPilot requests these permissions:
- Search Console, read-only (webmasters.readonly): the list of properties you can access, and search performance (clicks, impressions, click rate, position, queries and pages) for the property you choose.
- Google Analytics, read-only (analytics.readonly): the list of GA4 properties you can access, and sessions by source and landing page for the property you choose. This is used to show visits from AI assistants such as ChatGPT.
- Your email address (openid, email): only to show which Google account is connected.
SagaPilot cannot change anything in your Google accounts.
How the data is used
The data is used only to show you reports inside your own WordPress admin: totals and trends, pages that could get more clicks, pages that are losing traffic, and visits from AI assistants. If you choose to connect an AI assistant (see below), the same reports are made available to that assistant at your request.
Where the data is stored
- On your own WordPress site. Access tokens are stored encrypted with your site’s own security keys. Statistics are cached in your site’s database for up to 12 hours so the reports load quickly.
- The sign-in service (auth.networksaga.com). Google requires a secret key for sign-in that cannot be shipped inside a plugin, so a small service on our server completes the Google sign-in. It holds the result for at most 5 minutes so your site can collect it once, and it also renews expired access tokens for your site. It does not store your tokens permanently and never requests or receives your statistics.
- Server logs. Like any website, our web host keeps standard access logs (IP address, time and requested address) for security and operation.
Sharing
We do not sell, rent or share Google user data with anyone. We do not use it for advertising, and we do not let anyone read it except as described here.
AI assistants you connect yourself. SagaPilot can give an AI assistant (for example Claude or ChatGPT) read access to your reports through a private connection address that you create in the plugin. This is off by default. When you turn it on, the reports the assistant asks for are sent from your site to that assistant, and its provider’s own privacy terms apply. You can turn the connection off or create a new address at any time.
Limited Use
SagaPilot’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
Other data
- Bing Webmaster Tools: if you paste a Bing API key, it is stored encrypted on your site and used only to fetch your Bing clicks and impressions.
- llms.txt: the optional llms.txt file only lists content that is already public on your site.
- The free plugin sends no usage statistics or tracking data to us.
Removing access and deleting data
- Click Disconnect in SagaPilot → Settings. This revokes access at Google and deletes the stored tokens and cached statistics.
- You can also remove access at any time in your Google account under Third-party apps & services.
- Deleting the plugin removes all its settings, tokens, cached data and its database table.
Your rights
Under the GDPR you have the right to access, correct and delete personal data, and to object to its processing. Because SagaPilot keeps your data on your own site, you control it directly. For anything else, contact us at privacy@networksaga.com. You can also complain to the Swedish Authority for Privacy Protection (IMY).
Changes
If this policy changes, the new version will be published on this page with a new date.