What they see
A read-only version of the site's dashboard, with only the sections you enabled.
| Always shown | |
| Site name and domain | The link identifies the site it belongs to |
| Views and unique visitors | The headline numbers |
| The traffic chart | Over the range they select |
| Shown if you enabled it | |
| Traffic sources | Channels, referrers, campaigns, keywords |
| Pages | Your paths and their view counts |
| Countries | Where your readers are |
| Browsers and devices | Browser, operating system, screen size |
| AI crawlers | Which assistants read the site, verified by reverse DNS |
| When people read | The hour-by-day heatmap, and the busiest hour |
| Goals | Conversions you have defined, and how many fired |
| Funnels | Step-by-step drop-off between goals |
| Channel quality | Which sources convert, not just which ones send traffic |
| Revenue | Money attributed to each channel — off unless you turn it on |
| Search Console keywords | The search terms Google reports for the site — off unless you turn it on |
| Google Analytics history | Imported history from before the script, blended into the chart and lists — off unless you turn it on, and only while it is also shown on your own dashboard |
Revenue, keywords and imported history start switched off. A board is usually shared to show traffic; takings are a different kind of disclosure, the keywords tell a competitor what brings you traffic, and the imported history comes from your own Google account. Turning any of them on is a deliberate act, because a link you have already sent cannot be un-sent.
A section you disabled is not fetched. It is not hidden with CSS and not present in the page source — the data never leaves the server.
What they can do
Change the date range, up to the maximum you set.
Click rows to filter, the same drill-down as the real dashboard, within the sections you enabled.
What they cannot do or see
Your account. No sign-in, no settings, no billing, no plan, no usage. The page does not mention your subscription at all.
That holds when something is wrong with the account too. If your subscription lapses, or your traffic goes past your plan and its grace band, the link stops answering — and it answers the way an address that was never shared does, rather than explaining why. A client or a competitor holding the link learns nothing about your billing from it. You see the reason on your own dashboard, and the link works again as soon as the account does.
Your other sites. A link is scoped to one site. There is no navigation to another and no way to discover that others exist.
The live view. A shared board never shows who is on the site right now, and there is no setting that turns it on. Your own dashboard still does; a link does not hand that out.
Anything beyond the range cap. If you set 30 days, no request they make reaches back further, whatever they put in the URL.
Your team. No member list, no names, no email addresses.
Your exclusions and settings. Not shown, and the fact that you exclude a path is not inferable — an excluded path was never recorded, so it is simply absent.
Any individual visitor. There is no visitor list to show them. Nobody has one, including you. See What we deliberately cannot do.
Any control. They cannot change settings, create links, delete anything, or write. The link is read-only at the database level, not by hiding buttons.
The one thing to think about before you publish
Pages is your site's structure. If you have paths you would rather not
advertise — /admin, an unlaunched product page, a client-specific URL, an
internal tool — that card lists them by name with their view counts.
Two answers:
Turn Pages off for this link, if the rest is what you want to share.
Exclude those paths from the site entirely, which keeps them out of every view including your own. See Excluding your own visits.
The same thought applies to Referrers, which can name a partner or a private community that linked to you.
What we count when they look
Views of a share link are counted so you can see whether it is being used. That is a count of link views, not of who — there is no viewer identity to record.
Someone opening your shared dashboard does not create an event against your monthly limit. Reading is free.
Search engines
Shared boards ask search engines not to index them, and we do not submit them anywhere.
That request is honoured by the major crawlers but it is not a lock. A URL that ends up somewhere crawlable — a public tweet, a page on your site, a public repository — can still be found by anyone who sees it there. If the link must stay private, treat it as a secret.