PSM SEO Site Console

Free and paid

This plugin is free and fully functional; nothing here is gated behind a purchase. Planet Social Console Pro is a separate add on from our own site that adds higher crawl caps and a skeleton crawl for very large sites.

Security and your responsibility

Planet Social Marketing is an independent developer; this plugin is not made or endorsed by WordPress or the WordPress Foundation. Keys and sign ins you connect can act as your site, so keep them private, replace any that leak, and remove connections you no longer use. Every release passes WordPress’s official Plugin Check, but the plugin is provided as is, without warranty, under the GPL. We are not responsible for your own devices, hosting, accounts or passwords, or for other plugins and services. Keep everything updated, use strong passwords and two factor sign in, and connect only services you trust.

Privacy

Crawls run in your browser, and your business profile lives in its local storage. Settings sit in a single option row and are all removed on uninstall. Optional anonymous feature counts go only to your own site. Full policy: https://planetsocialmarketing.com/privacy

External services

This plugin talks to the outside services listed below, each only for the purpose described. Your crawl results, page content, and business profile are never sent to us. Every service other than the web font is off until you choose to use it.

1. 01Google Fonts (fonts.googleapis.com, fonts.gstatic.com).

The docked console interface loads its typefaces (Fraunces, Inter, and JetBrains Mono) from the Google Fonts CDN when you open the console screen in wp-admin. This is a request for font files only; your browser sends the standard request headers (including your IP address) to Google to fetch the fonts. No plugin data, page content, or profile information is included. If you prefer no external font request, the interface falls back to your system fonts.

This service is provided by Google LLC. Terms: https://policies.google.com/terms . Privacy: https://policies.google.com/privacy

1. 02Google APIs, optional and off until you enable them.

If you connect Google on the Keys tab, your browser goes to accounts.google.com so you can approve access, and the plugin exchanges, refreshes and, when you disconnect, revokes the resulting tokens at oauth2.googleapis.com. With that connection it reads your own verified Search Console property from www.googleapis.com, including, when you press Check the sitemaps on the Search tab, the list of sitemaps Search Console holds for it and what Google last found in each, and asks searchconsole.googleapis.com how Google sees a page when you inspect one. With the same connection it reads your own Google Analytics property: analyticsadmin.googleapis.com says which properties your account has and which web address each one measures, so the plugin can find the one that belongs to this site, and analyticsdata.googleapis.com returns visit counts, bounce rate, average visit length, where visits and visitors came from, and anything bought, for whole days only. Every one of these calls only reads: the plugin never creates, changes or deletes anything in Analytics or Search Console, and no page content or visitor record leaves your site. Sites connected before Analytics was added granted Search Console only and keep working; reading Analytics needs you to press Connect Google again and approve it. If you set up Cerebro server side tagging, the events you select are forwarded to the Google Tag Manager server container that you own and control, at the address you enter. If you enter your Google Tag Manager container ID and turn on Load the Tag Manager container on the Tracking tab, the plugin loads that container from www.googletagmanager.com on your front end, the same snippet you would otherwise paste by hand. All of these stay dormant until you configure them, and you can turn them off at any time. Data flows only between your own site and your own Google account.

This service is provided by Google LLC. Terms: https://policies.google.com/terms . Privacy: https://policies.google.com/privacy

1. 03Google Tag Manager API, optional and off until you switch on Tag Manager writing.

Only if you switch on Tag Manager writing on the Tracking tab and connect Google does the plugin ask Google for permission to edit your Tag Manager containers (the tagmanager.edit.containers scope). With it, the plugin asks tagmanager.googleapis.com which containers your account can edit, so you can pick one by name. When you press Read what is live, it reads the published version of the container you chose, which is the list of tags your visitors’ pages run, and keeps only each tag’s name, type, whether it is paused, and the event name and measurement ID it sends to, so the card can show what is already there. Reading changes nothing in the container. Then, only when you press Build the tags, it creates one new workspace in the container you chose and adds a trigger and an event tag for each event in the set you picked, a variable for each detail those events carry, a GA4 configuration tag unless you say GA4 already loads on the site, and, only if you tick FAQ opens, one Custom HTML tag that listens for FAQ boxes being opened. What is sent is the container address, your GA4 measurement ID and those tag, trigger and variable definitions. The FAQ listener runs in your visitors’ browsers only after you publish the workspace, and all it does there is push an event into the page’s own data layer for your container to send to your own GA4. It never publishes: the plugin does not ask for permission to publish a container, so nothing it creates reaches your visitors until you review the workspace in Tag Manager and publish it yourself. It never changes or deletes a tag or trigger that was already there. Show me what it would build lists the same objects and sends nothing. While the switch is off, the permission is not requested at all.

This service is provided by Google LLC. Terms: https://policies.google.com/terms . Privacy: https://policies.google.com/privacy

1. 04Stape, optional and off until you connect it.

If you paste a Stape API key on the Keys tab, the plugin asks Stape which server containers your account has and what addresses they answer on, so you can pick one by name instead of copying a long address by hand. Only the key is sent, as a header, to api.app.stape.io or api.app.eu.stape.io depending on the region you choose. Every call is read only: the plugin never creates, changes or deletes anything in your Stape account. No page content, crawl result or visitor data is involved. The key is stored encrypted with your site keys, and Disconnect removes it.

This service is provided by Stape. Terms: https://stape.io/terms-conditions . Privacy: https://stape.io/privacy-notice

1. 05Google PageSpeed Insights, optional and off until you connect it.

If you paste a PageSpeed Insights API key on the Keys tab, then each time you press the check button the plugin sends one page address and the key to www.googleapis.com and receives back how fast that page is. Google answers with two different things and the plugin keeps them apart: what real Chrome visitors experienced over the last 28 days, which only exists where enough people visited, and a simulation run on Google’s own hardware. Nothing is sent unless you press the button, and only the address of a page on your own site is ever sent.

This service is provided by Google LLC. Terms: https://policies.google.com/terms . Privacy: https://policies.google.com/privacy

1. 06IndexNow, optional and off until you switch it on.

IndexNow tells search engines that a page on your site changed, so they read it again sooner instead of waiting for their next crawl. While it is switched on, the plugin sends a request to api.indexnow.org when a public post is published, unpublished or moved to the trash, when the Planet Social Redirector plugin creates a permanent redirect (the old address and the new one), and when you press one of the IndexNow buttons, in the console or on the Search tab (your home page, or your twenty most recen