Google flow and access
Reportino will require access to these scopes:
https://www.googleapis.com/auth/analytics.readonly
https://www.googleapis.com/auth/webmasters.readonly.
This request is clearly visible when the user does the login and gets redirected to the Google consent page.
The info stored after the login is just the refresh token, needed to generate the access token on the further calls and the user name.
The data collected are only for the generation of chart reports that allow the end user a better and easier analysis of its own site’s metrics.
The info is collected by querying directly the Google Analytics Data API (for Google Analytics) and the Google API Webmasters (for Google Search).
The data requested are not stored in any way, are just shown to the final user based on its portal interaction.