Privacy Policy

Legal Rights & Agreement Rules · Context

This is Google's company-wide Privacy Policy: what it collects, why, and how you manage your information

The document is Google's Privacy Policy, not a YouTube-specific notice. Google says it is meant to help you understand what information Google collects, why it collects it, and how you can update, manage, export and delete that information. Google frames the relationship as you trusting it with your information and says it works to protect that information and put you in control. Questions about the policy go through a linked contact page that is not supplied here.

Supporting quotations

Google Privacy Policy

This Privacy Policy is meant to help you understand what information we collect, why we collect it, and how you can update, manage, export, and delete your information.

When you use our services, you’re trusting us with your information. We understand this is a big responsibility and work hard to protect your information and put you in control.

To help explain things as clearly as possible, we’ve added examples, explanatory videos, and definitions for key terms.

Qualifications & exceptions

• The policy covers Google services generally; YouTube appears only as an example service later in the introduction.

Not stated here

• The linked contact page and the examples, videos and key-term definitions it mentions are referenced but their content is not part of this source.

Legal Rights & Agreement Rules · Context

This version is effective October 1, 2026; archived versions and a PDF copy are linked, not supplied

The analyzed version states that it is effective October 1, 2026. The page also points to archived versions and to a downloadable PDF of the policy. Those are references only: neither earlier versions nor the PDF file are part of this source, so differences from previous versions cannot be determined from this document.

Supporting quotations

Effective October 1, 2026 | Archived versions

Not stated here

• Archived versions and the PDF copy are not supplied; whether the PDF text matches this page is not established here.

Account & Service Control · User right or choice

Google offers a Privacy Checkup tool to review and change privacy settings

At the top of the policy Google invites you to take the Privacy Checkup if you want to change your privacy settings. The privacy-controls section later describes the same tool as an opportunity to review and adjust important privacy settings. The policy supplies only the link and this description; what settings the tool actually exposes is not described in this document.

Supporting quotations

Privacy Checkup

Looking to change your privacy settings?

Take the Privacy Checkup

which provides an opportunity to review and adjust important privacy settings

Qualifications & exceptions

• The Privacy Checkup is offered as a tool for changing settings; the policy does not say which settings it covers.

Not stated here

• The content of the Privacy Checkup page is not supplied.

Data Access & Collection · Context

The policy covers Google apps, sites and devices, Chrome and Android, and Google products embedded in third-party apps

Google describes the services this policy covers in three groups: Google apps, sites and devices (its examples are Search, YouTube and Google Home); platforms such as the Chrome browser and the Android operating system; and products integrated into third-party apps and sites, such as ads, analytics and embedded Google Maps. The third group means Google can collect information under this policy when you use other companies' sites and apps that include Google products, not only when you use a Google-branded service.

Supporting quotations

We build a range of services that help millions of people daily to explore and interact with the world in new ways. Our services include:

Google apps, sites, and devices, like Search, YouTube, and Google Home

Platforms like the Chrome browser and Android operating system

Products that are integrated into third-party apps and sites, like ads, analytics, and embedded Google Maps

Qualifications & exceptions

• The named services are examples introduced with the word like; the list is illustrative, not stated as exhaustive.

Account & Service Control · User right or choice

You can use many services signed out, use Incognito, and adjust settings on what Google saves to your account

Google says you can manage your privacy through how you use its services. You can sign up for a Google Account to create and manage content like emails and photos or to get more relevant search results, but many services, such as Google Search and watching YouTube videos, work when you are signed out or have no account at all. You can also browse in a private mode like Chrome Incognito, which Google describes as helping keep your browsing private from other people who use your device, not from Google. Across its services, privacy settings such as history and personalization controls let you choose whether Google saves some types of data to your Google Account and how it uses that data.

Supporting quotations

you can sign up for a Google Account if you want to create and manage content like emails and photos, or see more relevant search results. And you can use many Google services when you’re signed out or without creating an account at all, like searching on Google or watching YouTube videos.

which helps keep your browsing private from other people who use your device

you can adjust your privacy settings (like history and personalization controls) to make choices about whether we save some types of data to your Google account and how we use it

Qualifications & exceptions

• Incognito mode is described only as keeping browsing private from other people who use your device.
• The settings control whether Google saves some types of data to your account and how it uses them; the policy does not say here that all data collection can be switched off.

Not stated here

• The linked Chrome Incognito help page is not supplied.

Data Access & Collection · Company practice

What Google collects, and how it is used, depends on how you use services and manage privacy controls

Google says it collects information to provide better services to all users, giving examples that range from working out which language you speak to which ads you will find most useful, which people matter most to you online, or which YouTube videos you might like. It states that the information it collects, and how that information is used, depends on how you use its services and how you manage your privacy controls. The section heading announces that Google wants you to understand the types of information it collects as you use its services.

Supporting quotations

We want you to understand the types of information we collect as you use our services

We collect information to provide better services to all our users — from figuring out basic stuff like which language you speak, to more complex things like which ads you’ll find most useful, the people who matter most to you online, or which YouTube videos you might like.

The information Google collects, and how that information is used, depends on how you use our services and how you manage your privacy controls.

Qualifications & exceptions

• Collection and use vary with the services you use and the privacy controls you set; the policy does not fix one set of data for every user.

Data Access & Collection · Company practice

Signed out, Google stores what it collects under unique identifiers tied to your browser, app or device

Google also collects and uses data that is not associated with your account. When you are not signed in to a Google Account, it stores the information it collects with unique identifiers tied to the browser, application or device you are using. Google says this lets it maintain your preferences across browsing sessions, such as your preferred language, or whether to show you more relevant search results or ads based on your activity across devices. The personalization section adds that you may get customized search results even when signed out, and that you can turn off signed-out search customization or search and browse privately if you do not want that.

Supporting quotations

Google also collects and uses data that is not associated with your account. For example, when you’re not signed in to a Google Account, we store the information we collect with unique identifiers tied to the browser, application, or device you’re using.

This allows us to do things like maintain your preferences across browsing sessions, such as your preferred language or whether to show you more relevant search results or ads based on your activity across devices.

You may also get customized search results even when you’re signed out.

Qualifications & exceptions

• Signed-out data is tied to browser, app or device identifiers rather than to an account.
• Signed-out search customization can be turned off, and private browsing is offered as an alternative.

Not stated here

• The linked pages for private search and the signed-out customization opt-out are not supplied.

Data Access & Collection · Company practice

Signed in, information Google stores with your Google Account is treated as personal information

When you are signed in, Google also collects information that it stores with your Google Account, and it says it treats that information as personal information. This is the dividing line the policy draws between account-linked data and the identifier-linked data it collects when you are signed out.

Supporting quotations

When you’re signed in, we also collect information that we store with your Google Account, which we treat as personal information.

Qualifications & exceptions

• Applies to information stored with your Google Account while signed in.

Data Access & Collection · Company practice

An account needs a name and password; phone number and payment details are optional; a phone number has several uses

When you create a Google Account you provide personal information that includes your name and a password. You can also choose to add a phone number or payment information. Even without signing in, you might choose to give Google information such as an email address to communicate with Google or receive updates about its services. The policy's definitions add that a phone number you add can be used for different purposes across Google services, depending on your settings, for example to help you regain access if you forget your password, to help people find and connect with you, and to make the ads you see more relevant to you.

Supporting quotations

Things you create or provide to us

When you create a Google Account, you provide us with personal information that includes your name and a password. You can also choose to add a phone number or payment information to your account.

Even if you aren’t signed in to a Google Account, you might choose to provide us with information — like an email address to communicate with Google or receive updates about our services.

If you add your phone number to your account, it can be used for different purposes across Google services, depending on your settings. For example, your phone number can be used to help you access your account if you forget your password, help people find and connect with you, and make the ads you see more relevant to you.

Qualifications & exceptions

• Phone number and payment information are optional additions.
• Uses of an added phone number depend on your settings and include ad relevance, not only account recovery.

Not stated here

• The linked help page about phone-number uses is not supplied.

Data Access & Collection · Company practice

Google collects content you create, upload or receive: emails, photos and videos, docs, and YouTube comments

Google collects the content you create, upload or receive from others when using its services. Its examples are email you write and receive, photos and videos you save, docs and spreadsheets you create, and comments you make on YouTube videos. Content received from others is included, not only content you author yourself.

Supporting quotations

We also collect the content you create, upload, or receive from others when using our services. This includes things like email you write and receive, photos and videos you save, docs and spreadsheets you create, and comments you make on YouTube videos.

Qualifications & exceptions

• The listed items are examples; the rule covers content you create, upload or receive from others while using the services.

Data Access & Collection · Company practice

Google collects app, browser and device data: identifiers, settings, carrier and phone number, IP address, crash reports

Google collects information about the apps, browsers and devices you use to reach Google services, which it says helps provide features like automatic product updates and dimming your screen when the battery runs low. The information includes unique identifiers, browser type and settings, device type and settings, operating system, mobile network information including carrier name and phone number, and application version number. Google also collects information about how your apps, browsers and devices interact with its services, including IP address, crash reports, system activity, and the date, time and referrer URL of your request.

Supporting quotations

Your apps, browsers & devices

We collect information about the apps, browsers, and devices you use to access Google services, which helps us provide features like automatic product updates and dimming your screen if your battery runs low.

The information we collect includes unique identifiers, browser type and settings, device type and settings, operating system, mobile network information including carrier name and phone number, and application version number. We also collect information about the interaction of your apps, browsers, and devices with our services, including IP address, crash reports, system activity, and the date, time, and referrer URL of your request.

Data Access & Collection · Company practice

Android devices with Google apps periodically send device, carrier, crash, installed-app and, by settings, usage data

Google collects device information when a Google service on your device contacts its servers, for example when you install an app from the Play Store or when a service checks for automatic updates. If you use an Android device with Google apps, the device periodically contacts Google servers to provide information about the device and its connection to Google services. That information includes your device type and carrier name, crash reports, which apps you have installed and, depending on your device settings, other information about how you are using your Android device. The two linked help pages describing these items are not part of this source.

Supporting quotations

We collect this information when a Google service on your device contacts our servers — for example, when you install an app from the Play Store or when a service checks for automatic updates. If you’re using an Android device with Google apps, your device periodically contacts Google servers to provide information about your device and connection to our services.

crash reports, which apps you've installed, and, depending on your device settings

Qualifications & exceptions

• Applies to Android devices with Google apps.
• The additional usage information is sent depending on your device settings.

Not stated here

• The linked pages on device type and carrier name and on other Android usage information are not supplied.

Data Access & Collection · Company practice

Activity data may include searches, videos watched, ad interactions, media, purchases, contacts, third-party activity

Google collects information about your activity in its services and gives recommending a YouTube video as an example use. The activity information it collects may include terms you search for, videos you watch, views and interactions with content and ads, media such as images, files, audio and video from your interactions, purchase activity, people with whom you communicate or share content, activity on third-party sites and apps that use Google services, and Chrome browsing history you have synced with your Google Account. The privacy-controls section qualifies this: across many services you can adjust history and personalization controls to choose whether some types of this data are saved in your Google Account, and Web & App Activity has a subsetting controlling whether information about your activity on other sites, apps and devices that use Google services is saved there.

Supporting quotations

Your activity

We collect information about your activity in our services, which we use to do things like recommend a YouTube video you might like. The activity information we collect may include:

Terms you search for

Videos you watch

Views and interactions with content and ads

Media (like images, files, audio and video) from your interactions

Purchase activity

People with whom you communicate or share content

Activity on third-party sites and apps that use our services

Chrome browsing history you’ve synced with your Google Account

Across many of our services, you can adjust history and personalization controls to make choices about whether we save some types of data in your Google Account and how we use it to personalize your experience.

Web & App Activity also has a subsetting that lets you control whether some

Qualifications & exceptions

• The list is introduced with may include; not every item applies to every user.
• History and personalization controls affect whether some activity data is saved to your Google Account, including a Web & App Activity subsetting for third-party-site activity.
• Chrome browsing history is included only where you have synced it with your Google Account.

Not stated here

• The policy does not state here which activity is collected regardless of these settings.

Data Access & Collection · Company practice

If you call or message through Google services, Google may collect call and message log information

If you use Google services to make and receive calls or send and receive messages, Google may collect call and message log information. The examples are your phone number, calling-party and receiving-party numbers, forwarding numbers, sender and recipient email addresses, the time and date of calls and messages, call duration, routing information, and the types and volumes of calls and messages. This describes log data about communications; the content of calls and messages is covered separately by the content card.

Supporting quotations

If you use our services to make and receive calls or send and receive messages, we may collect call and message log information like your phone number, calling-party number, receiving-party number, forwarding numbers, sender and recipient email address, time and date of calls and messages, duration of calls, routing information, and types and volumes of calls and messages.

Qualifications & exceptions

• Conditional on using Google services for calls or messages; stated as may collect.

Account & Service Control · User right or choice

You can find and manage activity saved in your history through your Google Account

Google says you can visit your Google Account to find and manage the activity information that is saved in your history, and links to the account page. The policy does not describe here what management actions are available; those are covered in the privacy-controls section.

Supporting quotations

You can visit your Google Account to find and manage activity information that’s saved in your history.

Go to Google Account

Qualifications & exceptions

• Applies to activity information saved in your history.

Not stated here

• The linked Google Account page is not supplied.

Data Access & Collection · Company practice

Google collects location from GPS and sensors, IP address, your activity, and nearby Wi-Fi, cell towers and Bluetooth

Google collects location information when you use its services, which it says helps it offer features like driving directions, search results for things near you, and ads based on your location. Depending on the products you use and the settings you choose, Google may use different types of location information: GPS and other sensor data from your device; IP address; activity on Google services such as your searches or places you label like home or work; and information about things near your device such as Wi-Fi access points, cell towers and Bluetooth-enabled devices. The continuation of this section adds that the types of location data collected and how long it is stored depend in part on your device and account settings, for example turning your Android device's location on or off, and that Timeline is something you can turn on if you want a private map of where you go.

Supporting quotations

Your location information

We collect location information when you use our services, which helps us offer features like driving directions, search results for things near you, and ads based on your location.

Depending on the products you’re using and settings you choose, Google may use different types of location information to help make some services and products you use more helpful. These include:

GPS and other sensor data from your device

IP address

Activity on Google services, such as from your searches or places you label like home or work

Information about things near your device, such as Wi-Fi access points, cell towers, and Bluetooth-enabled devices

The types of location data we collect and how long we store it depend in part on your device and account settings.

Qualifications & exceptions

• Which location types are used depends on the products you use and the settings you choose.
• Types collected and storage duration depend in part on device and account settings; Android device location can be turned off and Timeline is opt-in.

Not stated here

• The linked pages about device location settings, Timeline and how Google uses location information are not supplied.

Data Access & Collection · User right or choice

Location types and storage depend on device and account settings; Timeline is opt-in; activity history may hold location

The types of location data Google collects, and how long it stores them, depend in part on your device and account settings. Google gives two examples: you can turn your Android device's location on or off in the device's settings app, and you can turn on Timeline if you want a private map of where you go with your signed-in devices. Separately, depending on your settings, your searches and other activity from Google services, which may also include location information, are saved as history to your Google Account: activity from services like Search, Maps and Shopping goes to Search Services History, and activity on some other Google sites and apps goes to Web & App Activity. The privacy-controls section confirms that these history controls decide whether such activity is saved and used to personalize your experience. A linked page about how Google uses location information is referenced but not supplied.

Supporting quotations

The types of location data we collect and how long we store it depend in part on your device and account settings.

if you want to create a private map of where you go with your signed-in devices. Depending on your settings, your searches and other activity from Google services, which may also include location information, are saved as history to your Google Account. For example, activity from services like Search, Maps, and Shopping is saved to Search Services History, and your activity on some other Google sites and apps is saved to Web & App Activity.

Your location information

if you have Web & App Activity turned on, your activity from some other Google services are saved in your account so you can get more personalized experiences

Qualifications & exceptions

• Device location on Android is a device setting; Timeline must be turned on by you.
• Saving of searches and activity that may include location depends on your history settings (Search Services History, Web & App Activity).
• The policy says storage duration depends in part on these settings; it does not state durations here.

Not stated here

• The linked pages on device location, Timeline and how Google uses location information are not supplied.

Cross-references

• qualifies (model-proposed): Google collects location from GPS and sensors, IP address, your activity, and nearby Wi-Fi, cell towers and Bluetooth — qualifies: Which location types are collected and how long they are stored depend in part on device and account settings, including the Android location toggle and opt-in Timeline.

Data Access & Collection · Company practice

Google also collects information about you from public sources and from directory, marketing and security partners

In some circumstances Google collects information about you from publicly accessible sources; its example is that if your name appears in your local newspaper, Google Search may index that article and show it to people who search for your name. Google may also collect information about you from what it calls trusted partners: directory services that supply business information for display on Google services, marketing partners that supply information about potential customers of Google's business services, and security partners that supply information to protect against abuse. Google also receives information from partners in order to provide advertising and research services on those partners' behalf.

Supporting quotations

In some circumstances, Google also collects information about you from publicly accessible sources. For example, if your name appears in your local newspaper, Google’s Search engine may index that article and display it to other people if they search for your name.

We may also collect information about you from trusted partners, such as directory services who provide us with business information to be displayed on Google’s services, marketing partners who provide us with information about potential customers of our business services, and security partners who provide us with information to protect against abuse. We also receive information from partners to provide advertising and research services on their behalf.

Qualifications & exceptions

• Public-source collection applies in some circumstances; partner collection is stated as may.
• The marketing-partner example concerns potential customers of Google's business services, not consumers generally.

Not stated here

• The policy does not identify the partners or say what information they provide beyond these examples.

Data Access & Collection · Company practice

Google collects and stores information with cookies, pixel tags, local storage, databases and server logs

Google uses various technologies to collect and store information. The ones it names are cookies, pixel tags, local storage such as browser web storage or application data caches, databases, and server logs. The policy's definitions of these terms appear later in the document.

Supporting quotations

We use various technologies to collect and store information, including cookies, pixel tags, local storage, such as browser web storage or application data caches, databases, and server logs.

Qualifications & exceptions

• The list is introduced with including; it is not stated as exhaustive.

Use & Processing · Company practice

Google uses information collected from all its services for the listed purposes

Google states that it uses data to build better services and that it uses the information it collects from all of its services for the purposes that follow in this section. The phrase from all our services means the purposes apply to information pooled across Google services, not only within the service where it was collected.

Supporting quotations

We use data to build better services

We use the information we collect from all our services for the following purposes:

Qualifications & exceptions

• The purposes are the ones listed in this section; a later card records that other purposes require consent.

Use & Processing · Company practice

Google uses your information to deliver its services, such as returning search results or suggesting recipients

Google uses your information to deliver its services. Its examples are processing the terms you search for in order to return results, and helping you share content by suggesting recipients from your contacts.

Supporting quotations

Provide our services

We use your information to deliver our services, like processing the terms you search for in order to return results or helping you share content by suggesting recipients from your contacts.

Use & Processing · Company practice

Google uses your information to keep services working and to improve them

Google uses your information to ensure its services work as intended, for example tracking outages or troubleshooting issues you report. It also uses your information to improve services; its example is that understanding which search terms are most often misspelled helps improve the spell-check features used across its services.

Supporting quotations

Maintain & improve our services

We also use your information to ensure our services are working as intended, such as tracking outages or troubleshooting issues that you report to us. And we use your information to make improvements to our services — for example, understanding which search terms are most frequently misspelled helps us improve spell-check features used across our services.

Use & Processing · Company practice

Google uses information from existing services to develop new ones; public information helps train its AI models

Google uses the information it collects in existing services to help develop new ones. Its example is that understanding how people organized photos in Picasa, Google's first photos app, helped it design and launch Google Photos. The later business-purposes section adds a specific form of this: Google uses publicly available information to help train its AI models and build products and features like Google Translate, Gemini Apps and Cloud AI capabilities.

Supporting quotations

Develop new services

We use the information we collect in existing services to help us develop new ones. For example, understanding how people organized their photos in Picasa, Google’s first photos app, helped us design and launch Google Photos.

For example, we use publicly available information to help train Google’s AI models and build products and features like Google Translate, Gemini Apps, and Cloud AI capabilities.

Qualifications & exceptions

• The AI-training statement in the business-purposes section refers to publicly available information; the policy does not state here what other information is used for model training.

Inference & Profiling · Company practice

Google tailors content, recommendations and results to you; Play may use installed apps and YouTube views by settings

Google uses the information it collects to tailor its services for you, including customized and personalized experiences and recommendations such as content and search results. Its examples are Security Checkup, which gives security tips adapted to how you use Google products, and Google Play, which, depending on your available settings, could use information like the apps you have installed and the videos you have watched on YouTube to suggest new apps.

Supporting quotations

Provide personalized services, including content and ads

We use the information we collect to tailor our services for you, including providing customized and personalized experiences and recommendations, including things like content, and search results.

depending on your available settings, Google Play could use information like apps you’ve already installed and videos you’ve watched on YouTube to suggest new apps you might like

Qualifications & exceptions

• The Google Play example applies depending on your available settings.

Not stated here

• The linked Security Checkup page is not supplied.

Inference & Profiling · Company practice

Depending on your settings, Google may show personalized ads from your interests and activity across its services

Depending on your settings, Google may show you personalized ads based on your interests and your activity across Google services. Its example is that searching for mountain bikes may lead to ads for sports equipment on YouTube. You can control what information Google uses to show you ads through your ad settings in My Ad Center, which the policy links twice but does not describe further.

Supporting quotations

Depending on your settings, we may also show you personalized ads based on your interests and activity across Google services. For example, if you search for “mountain bikes,” you may see ads for sports equipment on YouTube. You can control what information we use to show you ads by visiting your ad settings in

Go to My Ad Center

Qualifications & exceptions

• Personalized ads are shown depending on your settings and are stated as may.
• Ad personalization is limited by the sensitive-category, content-source and identity-sharing restrictions in the following cards.

Not stated here

• The My Ad Center page and the controls it offers are not supplied.

Inference & Profiling · Restriction or exception

Google does not personalize ads on sensitive categories or on your Drive, Gmail or Photos content

Google states two limits on personalized ads. It does not show personalized ads based on sensitive categories, giving race, religion, sexual orientation and health as examples. And it does not show personalized ads based on your content from Drive, Gmail or Photos. These limits concern ad personalization; they do not say that such content is not collected or used for other purposes described elsewhere, such as abuse detection.

Supporting quotations

We don’t show you personalized ads based on sensitive categories, such as race, religion, sexual orientation, or health.

We don’t show you personalized ads based on your content from Drive, Gmail, or Photos.

Qualifications & exceptions

• The sensitive categories are examples introduced with such as.
• The content limit names Drive, Gmail and Photos; other services are not named.

Cross-references

• narrows (model-proposed): Depending on your settings, Google may show personalized ads from your interests and activity across its services — exception_to: Personalized ads are shown depending on your settings, but never on sensitive categories or on Drive, Gmail or Photos content.
• qualifies (model-proposed): Automated systems analyze your content for tailored results, ads and features, and to detect spam and malware — qualifies: Automated analysis of your content feeds tailored results and abuse detection, but content from Drive, Gmail or Photos is not used for personalized ads.

Sharing & Disclosure · Restriction or exception

Google does not share identifying details with advertisers unless you ask, as with tap-to-call sharing your number

Google says it does not share information that personally identifies you, such as your name or email, with advertisers unless you ask it to. Its example of asking is selecting the tap to call button on an ad for a nearby flower shop: Google connects the call and may share your phone number with the shop. The restriction concerns personally identifying information; it does not on its own address non-identifying data shared for advertising, which the sharing section covers.

Supporting quotations

We don’t share information that personally identifies you with advertisers, such as your name or email, unless you ask us to. For example, if you see an ad for a nearby flower shop and select the “tap to call” button, we’ll connect your call and may share your phone number with the flower shop.

Qualifications & exceptions

• Exception: when you ask Google to share, for example by using tap to call, your phone number may be shared with the advertiser.

Cross-references

• narrows (model-proposed): Depending on your settings, Google may show personalized ads from your interests and activity across its services — exception_to: Personalized ads do not involve sharing your identifying details with advertisers unless you ask, as with tap to call.

Use & Processing · Company practice

Google uses data for analytics and to help advertisers measure campaigns, including your related Search activity

Google uses data for analytics and measurement to understand how its services are used, for example analyzing data about your visits to its sites to optimize product design. It also uses data about the ads you interact with, including your related Google Search activity, to help advertisers understand the performance of their ad campaigns, using tools that include its ad and analytics services.

Supporting quotations

Measure performance

We use data for analytics and measurement to understand how our services are used. For example, we analyze data about your visits to our sites to do things like optimize product design. And we also use data about the ads you interact with, including your related Google Search activity, to help advertisers understand the performance of their ad campaigns. We use a variety of tools to do this, including ad and analytics services.

Not stated here

• The policy does not say here in what form campaign-performance information reaches advertisers.

Linking & Identification · Company practice

On sites and apps using Google's ad or analytics services, your activity may be linked with activity on other sites

When you visit sites or use apps that use Google's ad or analytics services, those services may link information about your activity from that site or app with activity from other sites or apps that also use Google services. This is cross-site linking that happens on third-party properties, not only on Google-branded services.

Supporting quotations

When you visit sites or use apps that use Google’s ad or analytics services, those services may link information about your activity from that site or app with activity from other sites or apps that use our services.

Qualifications & exceptions

• Stated as may link; applies on sites and apps that use Google's ad or analytics services.

Use & Processing · Company practice

Google uses your email to contact you about suspicious activity and changes, and keeps a record if you contact it

Google uses information it collects, like your email address, to interact with you directly. It may send a notification if it detects suspicious activity, such as a sign-in attempt from an unusual location, or tell you about upcoming changes or improvements to its services. If you contact Google, it keeps a record of your request to help solve any issues you are facing.

Supporting quotations

Communicate with you

We use information we collect, like your email address, to interact with you directly. For example, we may send you a notification if we detect suspicious activity, like an attempt to sign in to your Google Account from an unusual location. Or we may let you know about upcoming changes or improvements to our services. And if you contact Google, we’ll keep a record of your request in order to help solve any issues you might be facing.

Qualifications & exceptions

• Notifications are stated as may send.

Not stated here

• How long records of your requests are kept is not stated here.

Security & Safeguards · Company practice

Google uses information to detect, prevent and respond to fraud, abuse, security risks and technical issues

Google uses information to help improve the safety and reliability of its services. This includes detecting, preventing and responding to fraud, abuse, security risks and technical issues that could harm Google, its users or the public.

Supporting quotations

Protect Google, our users, and the public

We use information to help improve the safety and reliability of our services. This includes detecting, preventing, and responding to fraud, abuse, security risks, and technical issues that could harm Google, our users, or the public.

Use & Processing · Company practice

Automated systems analyze your content for tailored results, ads and features, and to detect spam and malware

Google uses different technologies to process your information for the purposes above. Automated systems analyze your content to provide tailored search results, personalized ads or other features tailored to how you use its services. Google also analyzes your content to detect abuse such as spam, malware and illegal content, and uses algorithms to recognize patterns in data, with Google Translate detecting common language patterns in phrases you ask it to translate as the example.

Supporting quotations

We use different technologies to process your information for these purposes. We use automated systems that analyze your content to provide you with things like tailored search results, personalized ads, or other features tailored to how you use our services. And we analyze your content to help us detect abuse such as spam, malware, and illegal content. We also use algorithms to recognize patterns in data.

Qualifications & exceptions

• Content analysis for abuse detection is stated without a settings qualifier; personalized ads and tailored results remain subject to the settings and limits in the personalization cards.

Linking & Identification · Company practice

Google may use your information across services and devices; by settings, other-site activity may be tied to you

Google may use the information it collects across its services and across your devices for the purposes described in this section. Its example is that, depending on your available settings, watching guitar videos on YouTube might lead to an ad for guitar lessons on a site that uses Google's ad products. Depending on your account settings, your activity on other sites and apps may be associated with your personal information in order to improve Google's services and the ads Google delivers.

Supporting quotations

We may use the information we collect across our services and across your devices for the purposes described above. For example, depending on your available settings, if you watch videos of guitar players on YouTube, you might see an ad for guitar lessons on a site that uses our ad products. Depending on your account settings, your activity on other sites and apps may be associated with your personal information in order to improve Google’s services and the ads delivered by Google.

Qualifications & exceptions

• Both the cross-device ad example and the association of other-site activity with your personal information depend on your settings.

Not stated here

• The specific setting that governs association of other-site activity is not named in this block; the controls section describes a Web & App Activity subsetting.

Sharing & Disclosure · Company practice

People who already have your email or identifying details may be shown your public account name and photo

If other users already have your email address or other information that identifies you, Google may show them your publicly visible Google Account information, such as your name and photo. Google says this helps people identify, for example, an email coming from you.

Supporting quotations

If other users already have your email address or other information that identifies you, we may show them your publicly visible Google Account information, such as your name and photo. This helps people identify an email coming from you, for example.

Qualifications & exceptions

• Applies to publicly visible Google Account information and to people who already hold your email or identifying information.

Not stated here

• Which account fields count as publicly visible is not defined in this block.

Use & Processing · Company commitment

Google will ask for your consent before using your information for a purpose not covered by this policy

Google commits to asking for your consent before using your information for a purpose that is not covered in this Privacy Policy. The purposes listed in this section and elsewhere in the policy therefore define what Google may do without asking again.

Supporting quotations

We’ll ask for your consent before using your information for a purpose that isn’t covered in this Privacy Policy.

Qualifications & exceptions

• Applies only to purposes not covered by the policy.

Account & Service Control · User right or choice

You have choices about collection and use: key account controls, the Privacy Checkup, and product-specific settings

Google says you have choices regarding the information it collects and how it is used. This section describes what it calls key controls for managing your privacy across its services, and points again to the Privacy Checkup for reviewing and adjusting important privacy settings. Google adds that it also offers specific privacy settings inside its products, described in a Product Privacy Guide that is referenced but not part of this source.

Supporting quotations

You have choices regarding the information we collect and how it's used

This section describes key controls for managing your privacy across our services.

In addition to these tools, we also offer specific privacy settings in our products — you can learn more in our Product Privacy Guide.

Go to Privacy Checkup

Qualifications & exceptions

• Product-specific privacy settings exist beyond the controls listed here; they are described only in the unsupplied Product Privacy Guide.

Not stated here

• The Product Privacy Guide and the Privacy Checkup page are not supplied.

Account & Service Control · User right or choice

Signed in, you can review and update information inside each service and in your Google Account

When you are signed in, you can always review and update information by visiting the services you use; Google gives Photos and Drive as examples of services designed to help you manage specific types of saved content. Google has also built your Google Account as a place to review and control information saved there, and the following cards list what it includes.

Supporting quotations

Managing, reviewing, and updating your information

When you’re signed in, you can always review and update information by visiting the services you use. For example, Photos and Drive are both designed to help you manage specific types of content you’ve saved with Google.

We also built a place for you to review and control information saved in your Google Account.

Qualifications & exceptions

• Applies when you are signed in.

Account & Service Control · User right or choice

History and personalization controls decide whether YouTube, Search and other activity is saved and used to personalize

Across many services you can adjust history and personalization controls to choose whether Google saves some types of data in your Google Account and how it uses that data to personalize your experience. With YouTube History on, the videos you watch and your searches are saved so you get better recommendations and can resume where you left off. Saving Search, Maps and Shopping activity to Search Services History lets you resume an AI Mode interaction or see past searches as Autocomplete suggestions. When Personalized Recommendations in Search services is on, those services can give results, curated feeds and AI responses personalized from information in your account, including Search Services History; the definitions add that this control, when enabled while signed in, gives results based on your previous searches and activity from other Google services. With Web & App Activity on, activity from some other Google services is saved for more personalized experiences, and a subsetting controls whether information about your activity on other sites, apps and devices that use Google services is saved there and used to improve Google services. The controls are reached through My Activity and Personalization Settings.

Supporting quotations

Privacy controls

Personalization and Activity Controls

Across many of our services, you can adjust history and personalization controls to make choices about whether we save some types of data in your Google Account and how we use it to personalize your experience. For example, if you have YouTube History turned on, the videos you watch and the things you search for are saved in your account so you can get better recommendations and remember where you left off. Saving activity from services like Search, Maps, and Shopping to your Search Services History lets you do things like resume an AI Mode interaction where you left off or see past searches as Autocomplete suggestions. When Personalized Recommendations in Search services is on, these services can provide results, curated feeds, and AI responses that are personalized to you based on info in your Google Account, including Search Services History. And if you have Web & App Activity turned on, your activity from some other Google services are saved in your account so you can get more personalized experiences. Web & App Activity also has a subsetting that lets you control whether some

is saved with Web & App Activity in your Google Account and used to improve Google services.

Go to

when you’re signed in to your Google Account and have the Personalized Recommendations in Search services control enabled, you can get more relevant search results that are based on your previous searches and activity from other Google services

Qualifications & exceptions

• Each named control (YouTube History, Search Services History, Personalized Recommendations, Web & App Activity and its subsetting) governs its own data; the policy does not say here what is saved when a control is off.
• Across many services, not all services, is the stated scope.

Not stated here

• The linked help page about other-site activity and the My Activity and Personalization Settings pages are not supplied.

Cross-references

• qualifies (model-proposed): Activity data may include searches, videos watched, ad interactions, media, purchases, contacts, third-party activity — qualifies: History and personalization controls determine whether some activity data is saved to your Google Account and used to personalize.

Account & Service Control · User right or choice

In My Ad Center you can change interests, choose whether personal info personalizes ads, and switch off ad services

Ad settings let you manage your preferences about the ads shown to you on Google and on sites and apps that partner with Google to show ads. You can modify your interests, choose whether your personal information is used to make ads more relevant to you, and turn certain advertising services on or off. The control is reached through My Ad Center.

Supporting quotations

Ad settings

Manage your preferences about the ads shown to you on Google and on sites and apps that partner with Google to show ads. You can modify your interests, choose whether your personal information is used to make ads more relevant to you, and turn on or off certain advertising services.

Go to My Ad Center

Qualifications & exceptions

• Covers ads on Google and on partner sites and apps; the policy says certain advertising services can be turned off, not all.

Not stated here

• Which advertising services can be turned off is not stated here; My Ad Center is not supplied.

Account & Service Control · User right or choice

About You lets you manage personal info in your account and control who sees it across Google services

The About You control lets you manage personal information in your Google Account and control who can see it across Google services. The policy does not list here which fields are covered.

Supporting quotations

About you

Manage personal info in your Google Account and control who can see it across Google services.

Go to About You

Not stated here

• The About You page is not supplied.

Sharing & Disclosure · User right or choice

You choose whether your name and photo appear beside your reviews and recommendations shown in ads

Shared endorsements is a choice about whether your name and photo appear next to your activity, such as reviews and recommendations, when that activity appears in ads. The existence of the control means such activity can appear in ads; your setting determines whether your name and photo accompany it.

Supporting quotations

Shared endorsements

Choose whether your name and photo appear next to your activity, like reviews and recommendations, that appear in ads.

Go to Shared Endorsements

Qualifications & exceptions

• Applies to activity like reviews and recommendations that appear in ads.

Not stated here

• The default state of the setting is not stated here.

Data Access & Collection · User right or choice

You can manage information that sites and apps using Google services, like Google Analytics, may share with Google

A further control covers websites and apps that use Google services such as Google Analytics. You can manage the information those sites and apps may share with Google when you visit or interact with them. The policy points to a page about how Google uses information from sites or apps that use its services; that page is not part of this source.

Supporting quotations

Sites and apps that use Google services

Manage information that websites and apps using Google services, like Google Analytics, may share with Google when you visit or interact with their services.

Go to How Google uses information from sites or apps that use our services

Qualifications & exceptions

• Concerns information third-party sites and apps may share with Google through Google services they use.

Not stated here

• The referenced page on how Google uses information from such sites and apps is not supplied.

Account & Service Control · User right or choice

My Activity lets you review signed-in activity saved to your account by date and topic and delete some or all of it

My Activity lets you review and control data saved to your Google Account when you are signed in and using Google services, such as searches you have done or your visits to Google Play. You can browse by date and by topic, and delete part or all of your activity. It is listed among the ways to review and update your information.

Supporting quotations

Ways to review & update your information

My Activity

My Activity allows you to review and control data that’s saved to your Google Account when you’re signed in and using Google services, like searches you’ve done or your visits to Google Play. You can browse by date and by topic, and delete part or all of your activity.

Go to My Activity

Qualifications & exceptions

• Covers data saved to your account while signed in.

Not stated here

• The My Activity page is not supplied.

Account & Service Control · User right or choice

Google Dashboard lets you manage information associated with specific products

Google Dashboard is the control for managing information associated with specific Google products. The policy gives no further detail here.

Supporting quotations

Google Dashboard

Google Dashboard allows you to manage information associated with specific products.

Go to Dashboard

Not stated here

• The Dashboard page is not supplied.

Account & Service Control · User right or choice

The Personal Info page lets you manage contact information such as name, email and phone number

Your personal information control lets you manage your contact information, such as your name, email and phone number, through the Personal Info page of your Google Account.

Supporting quotations

Your personal information

Manage your contact information, such as your name, email, and phone number.

Go to Personal Info

Not stated here

• The Personal Info page is not supplied.

Account & Service Control · User right or choice

Signed out, you can turn off search customization, pause or delete YouTube history, and set ad preferences

When you are signed out, you can manage information associated with your browser or device. The listed controls are signed-out search customization, which lets you choose whether your search activity is used to offer more relevant results and recommendations; YouTube settings, which let you pause and delete your YouTube Search History and YouTube Watch History; and Ad Settings, which let you manage your preferences about ads shown on Google and on sites and apps that partner with Google to show ads.

Supporting quotations

When you’re signed out, you can manage information associated with your browser or device, including:

Choose whether your search activity is used to offer you more relevant results and recommendations.

YouTube settings: Pause and delete your

your preferences about the ads shown to you on Google and on sites and apps that partner with Google to show ads.

Qualifications & exceptions

• These controls apply to information associated with your browser or device while signed out.
• The list is introduced with including; it is not stated as exhaustive.

Not stated here

• The linked signed-out customization, YouTube history and ad settings pages are not supplied.

Account & Service Control · User right or choice

You can export a copy of the content in your Google Account to back it up or use it elsewhere

The section on exporting, removing and deleting information opens by stating that you can export a copy of the content in your Google Account if you want to back it up or use it with a service outside Google. The rest of that section follows in the next part of the document.

Supporting quotations

Exporting, removing & deleting your information

You can export a copy of content in your Google Account if you want to back it up or use it with a service outside of Google.

Qualifications & exceptions

• Applies to content in your Google Account.

Account & Service Control · User right or choice

You can export a copy of your Google Account content for backup or use with an outside service

Under exporting, removing and deleting your information, Google says you can export a copy of the content in your Google Account if you want to back it up or use it with a service outside Google, and links to an export tool. The policy does not say here which content types are exportable or in what formats.

Supporting quotations

You can export a copy of content in your Google Account if you want to back it up or use it with a service outside of Google.

Export your data

Exporting, removing & deleting your information

Qualifications & exceptions

• Applies to content in your Google Account.

Not stated here

• The export tool page is not supplied; covered content types and formats are not stated here.

Account & Service Control · User right or choice

You can delete content from specific services, specific items via My Activity, whole products, or your entire account

To delete your information, Google lists four routes: delete your content from specific Google services; search for and delete specific items from your account using My Activity; delete specific Google products, including your information associated with those products; or delete your entire Google Account. A combined delete page is linked. What happens to deleted data afterwards is described in the retention section, not here.

Supporting quotations

To delete your information, you can:

Delete your content from specific Google services

Search for and then delete specific items from your account using

Delete specific Google products

including your information associated with those products

Delete your entire Google Account

Delete your information

Qualifications & exceptions

• Deleting a product deletes your information associated with that product, as the policy states; the timing of removal is covered in the retention section.

Not stated here

• The linked My Activity, delete-products, delete-account and delete-information pages are not supplied.

Account & Service Control · User right or choice

Inactive Account Manager lets you give someone access to parts of your account if you cannot use it

Inactive Account Manager allows you to give someone else access to parts of your Google Account in case you are unexpectedly unable to use your account. The policy does not say here which parts can be shared or what counts as inactivity.

Supporting quotations

allows you to give someone else access to parts of your Google Account in case you’re unexpectedly unable to use your account.

Qualifications & exceptions

• Access is to parts of your account and applies in case you are unexpectedly unable to use it.

Not stated here

• The Inactive Account Manager page is not supplied; inactivity conditions and shareable parts are not stated here.

Content & IP Rights · User right or choice

You can request removal of content from specific Google services, subject to applicable law and Google's policies

Google says you can also request to remove content from specific Google services based on applicable law and its policies. This is a request route rather than a self-service deletion, and whether content is removed depends on the law that applies and on Google's own policies, which are linked but not supplied.

Supporting quotations

from specific Google services based on applicable law and our policies.

And finally, you can also

Qualifications & exceptions

• Removal is based on applicable law and Google's policies; the policy does not promise removal of any particular content.

Not stated here

• The linked removal-request page and the policies it applies are not supplied.

Account & Service Control · User right or choice

Signed in or not, browser cookie settings and device settings limit collection, but services rely on cookies to work

Google lists further ways to control the information it collects whether or not you are signed in to a Google Account. Browser settings: you can configure your browser to indicate when Google sets a cookie, or to block all cookies from a specific domain or from all domains; Google reminds you that its services rely on cookies to function properly, for things like remembering your language preferences. The cookie definition repeats that you can configure your browser to refuse all cookies or be told when one is sent, and that some website features or services may not function properly without cookies. Device-level settings: your device may have controls that determine what information Google collects, for example modifying location settings on an Android device.

Supporting quotations

There are other ways to control the information Google collects whether or not you’re signed in to a Google Account, including:

Browser settings: For example, you can configure your browser to indicate when Google has set a cookie in your browser. You can also configure your browser to block all cookies from a specific domain or all domains. But remember that our services rely on cookies to function properly, for things like remembering your language preferences.

Device-level settings: Your device may have controls that determine what information we collect.

You can configure your browser to refuse all cookies or to indicate when a cookie is being sent. However, some website features or services may not function properly without cookies.

Qualifications & exceptions

• Blocking cookies may stop services working properly; this is Google's stated trade-off, not a prohibition.
• Device-level controls are stated as may have and depend on your device; the Android location example is linked, not described.

Not stated here

• The linked Android location settings page is not supplied.

Sharing & Disclosure · User right or choice

You control how you share, but publicly shared content may become reachable through search engines including Google

Many Google services let you share information with other people, and Google says you have control over how you share; its example is that you can share videos on YouTube publicly or keep them private. Google reminds you that when you share information publicly, your content may become accessible through search engines, including Google Search.

Supporting quotations

When you share your information

Many of our services let you share information with other people, and you have control over how you share. For example, you can share videos on YouTube publicly or you can decide to keep your videos private. Remember, when you share information publicly, your content may become accessible through search engines, including Google Search.

Qualifications & exceptions

• Public sharing can expose content to search engines; this is stated as may become accessible.

Sharing & Disclosure · Company practice

Signed-in YouTube comments and Play reviews show your name and photo, which may also appear in ads by your setting

When you are signed in and interact with some Google services, such as leaving comments on a YouTube video or reviewing an app in Google Play, your name and photo appear next to that activity. Google may also display this information in ads, depending on your Shared endorsements setting, which the controls section describes as your choice about whether your name and photo appear beside such activity in ads.

Supporting quotations

When you’re signed in and interact with some Google services, like leaving comments on a YouTube video or reviewing an app in Play, your name and photo appear next to your activity. We may also display this information in

ads depending on your Shared endorsements setting

Qualifications & exceptions

• Display in ads depends on your Shared endorsements setting.
• Applies when signed in and interacting with some Google services.

Not stated here

• The linked Shared endorsements help page is not supplied.

Sharing & Disclosure · Restriction or exception

Google does not share personal info outside Google except with consent, domain admins, processors or for legal reasons

Google states that it does not share your personal information with companies, organizations or individuals outside of Google except in the cases that follow: with your consent, with domain administrators, for external processing, and for legal reasons. Two further statements in this section sit beside this rule: Google may share non-personally identifiable information publicly and with partners, and personal information may be transferred in a merger, acquisition or sale of assets with notice. The rule therefore concerns personal information, and the following cards set out each exception.

Supporting quotations

When Google shares your information

We do not share your personal information with companies, organizations, or individuals outside of Google except in the following cases:

With your consent

With domain administrators

For external processing

For legal reasons

Qualifications & exceptions

• The restriction covers personal information; non-personally identifiable information is shared under a separate statement.
• Exceptions: your consent, domain administrators, external processing by affiliates and trusted businesses, and legal reasons.

Sharing & Disclosure · Company practice

Google shares personal info outside Google with your consent, and asks explicit consent for sensitive information

Google shares personal information outside Google when it has your consent. Its example is making a reservation through a booking service with Google Home, where Google gets your permission before sharing your name or phone number with the restaurant. Google also provides controls to review and manage third-party apps and sites you have given access to data in your Google Account. For any sensitive personal information, Google says it will ask for your explicit consent before sharing.

Supporting quotations

We’ll share personal information outside of Google when we have your consent.

through a booking service, we’ll get your permission before sharing your name or phone number with the restaurant.

you have given access to data in your Google Account. We’ll ask for your explicit consent to share any sensitive personal information.

Qualifications & exceptions

• Sensitive personal information requires explicit consent; the policy does not define sensitive here.
• Third-party app and site access you granted can be reviewed and managed through a linked permissions page.

Not stated here

• The Google Home reservation help page and the permissions page are not supplied.

Cross-references

• narrows (model-proposed): Google does not share personal info outside Google except with consent, domain admins, processors or for legal reasons — exception_to: Sharing with your consent is the first listed exception to the rule against sharing personal information outside Google.

Sharing & Disclosure · Company practice

If your account is from a school or employer, its domain administrator and resellers can access, retain and control it

If you are a student or work for an organization that uses Google services, your domain administrator and the resellers who manage your account have access to your Google Account. They may be able to access and retain information stored in your account, such as your email; view statistics about your account, such as how many apps you install; change your account password; suspend or terminate your account access; receive your account information to satisfy applicable law, regulation, legal process or an enforceable governmental request; and restrict your ability to delete or edit your information or your privacy settings. This exception applies to that audience only, and it means the privacy controls described elsewhere may not be fully available to you on such an account.

Supporting quotations

If you’re a student or work for an organization that uses Google services, your

and resellers who manage your account will have access to your Google Account. They may be able to:

Access and retain information stored in your account, like your email

View statistics regarding your account, like how many apps you install

Change your account password

Suspend or terminate your account access

Receive your account information in order to satisfy applicable law, regulation, legal process, or enforceable governmental request

Restrict your ability to delete or edit your information or your privacy settings

Qualifications & exceptions

• Applies only to accounts managed by an organization (students or employees of an organization using Google services).
• Each administrator power is stated as may be able to; what a given administrator can do is not fixed by the policy.

Not stated here

• The linked domain administrator help page is not supplied.

Cross-references

• narrows (model-proposed): Google does not share personal info outside Google except with consent, domain admins, processors or for legal reasons — exception_to: Domain administrator and reseller access is the second listed exception to the no-sharing rule, for organization-managed accounts.
• qualifies (model-proposed): You have choices about collection and use: key account controls, the Privacy Checkup, and product-specific settings — qualifies: On organization-managed accounts, administrators may restrict your ability to delete or edit your information or your privacy settings, limiting the controls described for individual accounts.

Sharing & Disclosure · Company practice

Affiliates and service providers process personal info for Google, including reviewing YouTube videos and audio samples

Google provides personal information to its affiliates and other trusted businesses or persons to process it for Google, based on Google's instructions and in compliance with this Privacy Policy and other appropriate confidentiality and security measures. Its examples are service providers that help operate data centers, deliver products and services, improve internal business processes, and offer support to customers and users. Google also uses service providers to help review YouTube video content for public safety, and to analyze and listen to samples of saved user audio to help improve Google's audio recognition technologies.

Supporting quotations

We provide personal information to our affiliates and other trusted businesses or persons to process it for us, based on our instructions and in compliance with our Privacy Policy and any other appropriate confidentiality and security measures. For example, we use service providers to help operate our data centers, deliver our products and services, improve our internal business processes, and offer additional support to customers and users. We also use service providers to help review YouTube video content for public safety and analyze and listen to samples of saved user audio to help improve Google’s audio recognition technologies.

Qualifications & exceptions

• Processors act on Google's instructions under the policy and confidentiality and security measures.
• Human review of YouTube video content and listening to saved audio samples by service providers are named uses.

Not stated here

• Which audio counts as saved user audio, and the settings that govern it, are not stated here.

Cross-references

• narrows (model-proposed): Google does not share personal info outside Google except with consent, domain admins, processors or for legal reasons — exception_to: Provision of personal information to affiliates and processors on Google's instructions is the third listed exception.

Sharing & Disclosure · Company practice

Google shares personal info when it believes in good faith it is reasonably necessary for law, Terms, security or harm

Google will share personal information outside Google if it has a good-faith belief that disclosure is reasonably necessary to respond to any applicable law, regulation, legal process or enforceable governmental request; to enforce applicable Terms of Service, including investigating potential violations; to detect, prevent or otherwise address fraud, security or technical issues; or to protect against harm to the rights, property or safety of Google, its users or the public. Google says it publishes the number and type of government requests it receives in its Transparency Report, which is linked but not supplied.

Supporting quotations

We will share personal information outside of Google if we have a good-faith belief that disclosure of the information is reasonably necessary to:

Respond to any applicable law, regulation,legal process, or enforceable governmental request. We share information about the number and type of requests we receive from governments in our

Enforce applicable Terms of Service, including investigation of potential violations.

Detect, prevent, or otherwise address fraud, security, or technical issues.

Protect against harm to the rights, property or safety of Google, our users, or the public.

Qualifications & exceptions

• The standard is Google's good-faith belief that disclosure is reasonably necessary for one of the listed reasons.
• Enforcement of Terms of Service includes investigation of potential violations.

Not stated here

• The Transparency Report is not supplied.

Cross-references

• narrows (model-proposed): Google does not share personal info outside Google except with consent, domain admins, processors or for legal reasons — exception_to: Good-faith disclosure for legal reasons is the fourth listed exception to the no-sharing rule.

Sharing & Disclosure · Company practice

Google may share non-identifiable info publicly and with partners; some partners may set own cookies on your device

Google may share non-personally identifiable information publicly and with its partners, such as publishers, advertisers, developers or rights holders; its example is publishing trends about general use of its services. Google also allows specific partners to collect information from your browser or device for advertising and measurement purposes using their own cookies or similar technologies. That second statement means collection by partners directly from your device, outside the personal-information sharing rule above.

Supporting quotations

We may share non-personally identifiable information publicly and with our partners — like publishers, advertisers, developers, or rights holders. For example, we share information publicly to show trends about the general use of our services. We also allow specific partners to collect information from your browser or device for advertising and measurement purposes using their own cookies or similar technologies.

Qualifications & exceptions

• Sharing covers non-personally identifiable information; the policy does not define that term here.
• Partner collection from your device is limited to specific partners and to advertising and measurement purposes, using the partners' own technologies.

Not stated here

• Which partners are allowed to collect from your device is not stated.

Sharing & Disclosure · Company commitment

In a merger, acquisition or asset sale, Google keeps personal info confidential and gives notice before any transfer

If Google is involved in a merger, acquisition or sale of assets, it commits to continue ensuring the confidentiality of your personal information and to give affected users notice before personal information is transferred or becomes subject to a different privacy policy. The policy does not say how much notice is given or what choices you would have.

Supporting quotations

If Google is involved in a merger, acquisition, or sale of assets, we’ll continue to ensure the confidentiality of your personal information and give affected users notice before personal information is transferred or becomes subject to a different privacy policy.

Qualifications & exceptions

• Notice precedes transfer or a change of governing privacy policy.

Not stated here

• Notice period and user options are not stated.

Security & Safeguards · Company commitment

Google builds security into its products, blocks detected threats automatically, and notifies you of risks it finds

Google says all its products are built with strong security features that continuously protect your information. The insights it gains from maintaining its services help it detect and automatically block security threats before they reach you. If Google detects something risky that it thinks you should know about, it says it will notify you and guide you through steps to stay better protected.

Supporting quotations

We build security into our services to protect your information

All Google products are built with strong security features that continuously protect your information. The insights we gain from maintaining our services help us detect and automatically block security threats from ever reaching you. And if we do detect something risky that we think you should know about, we’ll notify you and help guide you through steps to stay better protected.

Qualifications & exceptions

• Notification applies to risks Google detects and judges you should know about.

Security & Safeguards · Company practice

Encryption in transit, account security tools, practice reviews and need-based access limits protect your information

Google says it works to protect you and itself from unauthorized access, alteration, disclosure or destruction of the information it holds. The listed measures are: encryption to keep your data private while in transit; security features such as Safe Browsing, Security Checkup and 2-Step Verification to help you protect your account; reviews of its information collection, storage and processing practices, including physical security measures, to prevent unauthorized access to its systems; and restricting access to personal information to Google employees, contractors and agents who need it in order to process it, all of whom are subject to strict contractual confidentiality obligations and may be disciplined or terminated for failing to meet them. The sharing section adds that affiliates and trusted businesses who process personal information for Google do so on its instructions and under the policy and other confidentiality and security measures.

Supporting quotations

We work hard to protect you and Google from unauthorized access, alteration, disclosure, or destruction of information we hold, including:

We use encryption to keep your data private while in transit

We offer a range of security features, like

to help you protect your account

We review our information collection, storage, and processing practices, including physical security measures, to prevent unauthorized access to our systems

We restrict access to personal information to Google employees, contractors, and agents who need that information in order to process it. Anyone with this access is subject to strict contractual confidentiality obligations and may be disciplined or terminated if they fail to meet these obligations.

based on our instructions and in compliance with our Privacy Policy and any other appropriate confidentiality and security measures

Qualifications & exceptions

• Encryption is stated for data in transit; the policy does not state here whether data is encrypted at rest.
• Access to personal information also extends to external processors acting on Google's instructions under confidentiality and security measures.

Not stated here

• The Safe Browsing and 2-Step Verification pages are not supplied.

Account & Service Control · User right or choice

You can export a copy of your information from your Google Account at any time

The standalone exporting and deleting section states that you can export a copy of your information or delete it from your Google Account at any time, and repeats that you can export a copy of your account content to back it up or use it with a service outside Google through the linked export tool. The Google Account definition adds that you can edit or delete your account at any time through your account settings.

Supporting quotations

Exporting & deleting your information

You can export a copy of your information or delete it from your Google Account at any time

You can export a copy of content in your Google Account if you want to back it up or use it with a service outside of Google.

Export your data

You can edit or delete your account at any time through your Google Account settings.

Qualifications & exceptions

• Stated as available at any time for your Google Account.

Not stated here

• The export tool page is not supplied.

Account & Service Control · User right or choice

To delete, you can remove content from services, delete items in My Activity, delete products, or delete the account

The standalone section repeats the four deletion routes: delete your content from specific Google services; search for and delete specific items from your account using My Activity; delete specific Google products, including your information associated with those products; or delete your entire Google Account, with a combined delete page linked. The retention section that follows explains what happens after deletion.

Supporting quotations

To delete your information, you can:

Delete your content from specific Google services

Search for and then delete specific items from your account using

including your information associated with those products

Delete your entire Google Account

Delete your information

Qualifications & exceptions

• Deleting a product deletes your information associated with it; timing of removal follows the deletion process described in the retention cards.

Not stated here

• The linked deletion pages are not supplied.

Retention & Deletion · Company practice

Retention varies: until you delete it, auto-deleted or anonymized after a set period, until account deletion, or longer

Google retains the data it collects for different periods depending on what it is, how it is used and how you configure your settings. Some data you can delete whenever you like, such as your personal info and the content you create or upload like photos and documents; you can also delete activity information saved in your account or choose to have it deleted automatically after a set period, and Google keeps that data in your account until you remove it or choose to have it removed. Other data is deleted or anonymized automatically after a set period, such as advertising data in server logs. Some data is kept until you delete your Google Account, such as information about how often you use its services. And some data is retained for longer when necessary for legitimate business or legal purposes, such as security, fraud and abuse prevention, or financial record-keeping.

Supporting quotations

Retaining your information

We retain the data we collect for different periods of time depending on what it is, how we use it, and how you configure your settings:

Some data you can delete whenever you like, such as your

after a set period of time. We’ll keep this data in your Google Account until you remove it or choose to have it removed.

Other data is deleted or anonymized automatically after a set period of time, such as advertising data in server logs.

We keep some data until you delete your Google Account, such as information about how often you use our services.

And some data we retain for longer periods of time when necessary for legitimate business or legal purposes, such as security, fraud and abuse prevention, or financial record-keeping.

Qualifications & exceptions

• Deletable-anytime data stays until you remove it or set auto-delete; the set periods for auto-deletion and anonymization are not stated here.
• Longer retention applies when Google judges it necessary for legitimate business or legal purposes.

Not stated here

• Specific retention periods are not stated in this document; a linked retention page is referenced but not supplied.

Cross-references

• qualifies (model-proposed): You can delete content from specific services, specific items via My Activity, whole products, or your entire account — qualifies: Some data is retained for longer periods for business or legal purposes even after account or product deletion.

Retention & Deletion · Company practice

Deleted data is removed or kept only anonymized, with possible delays before copies leave active and backup systems

When you delete data, Google follows a deletion process meant to ensure the data is safely and completely removed from its servers or retained only in anonymized form. Because Google tries to protect information from accidental or malicious deletion, there may be delays between when you delete something and when copies are deleted from its active and backup systems. Google points to a page with more about its retention periods, including how long deletion takes; that page is not part of this source.

Supporting quotations

When you delete data, we follow a deletion process to make sure that your data is safely and completely removed from our servers or retained only in anonymized form. We try to ensure that our services protect information from accidental or malicious deletion. Because of this, there may be delays between when you delete something and when copies are deleted from our active and backup systems.

You can read more about Google’s data retention periods, including how long it takes us to delete your information.

Qualifications & exceptions

• Deleted data may be retained in anonymized form rather than removed.
• Delays are stated as possible and are not quantified here.

Not stated here

• The referenced data retention periods page, including deletion timing, is not supplied.

Cross-references

• qualifies (model-proposed): You can delete content from specific services, specific items via My Activity, whole products, or your entire account — qualifies: Deleting through any of the listed routes is followed by a deletion process with possible delays and possible retention in anonymized form.

Legal Rights & Agreement Rules · Company commitment

Google regularly reviews this policy and says it processes your information in compliance with it

Under compliance and cooperation with regulators, Google says it regularly reviews this Privacy Policy and makes sure it processes your information in ways that comply with it.

Supporting quotations

Compliance & cooperation with regulators

We regularly review this Privacy Policy and make sure that we process your information in ways that comply with it.

Legal Rights & Agreement Rules · Company practice

Your information may be processed on servers outside your country, with the same protections Google applies everywhere

Google maintains servers around the world, and your information may be processed on servers located outside the country where you live. Google acknowledges that data protection laws vary among countries, some providing more protection than others, and says that regardless of where your information is processed it applies the same protections described in this policy. It also says it complies with certain legal frameworks relating to the transfer of data, without naming them here.

Supporting quotations

Data transfers

We maintain servers around the world and your information may be processed on servers located outside of the country where you live. Data protection laws vary among countries, with some providing more protection than others. Regardless of where your information is processed, we apply the same protections described in this policy. We also comply with certain legal frameworks relating to the transfer of data.

Qualifications & exceptions

• Protections applied are those described in this policy, not the laws of your country.
• The transfer frameworks Google complies with are described only as certain legal frameworks.

Not stated here

• Which legal transfer frameworks apply, and to which regions, is not stated in this block.

Legal Rights & Agreement Rules · Procedure

Google answers formal written complaints directly and works with regulators on unresolved data-transfer complaints

When Google receives formal written complaints, it responds by contacting the person who made the complaint. For complaints about the transfer of your data that it cannot resolve with you directly, Google works with the appropriate regulatory authorities, including local data protection authorities, to resolve them.

Supporting quotations

When we receive formal written complaints, we respond by contacting the person who made the complaint. We work with the appropriate regulatory authorities, including local data protection authorities, to resolve any complaints regarding the transfer of your data that we cannot resolve with you directly.

Qualifications & exceptions

• Regulator involvement is stated for data-transfer complaints Google cannot resolve with you directly.

Not stated here

• How to lodge a formal written complaint is not stated in this block.

Legal Rights & Agreement Rules · Context

For US state privacy laws, the policy maps categories, sources, purposes, disclosures and retention to its sections

Google notes that some U.S. state privacy laws require specific disclosures and says this Privacy Policy is designed to help you understand how it handles your information: categories and sources of information are in Information Google collects; purposes are in Why Google collects data; when Google may disclose information is in Sharing your information; and retention is in Retaining your information. This mapping points readers to the sections already carded; it adds the two statements in the following cards about selling and sharing and about anonymization.

Supporting quotations

U.S. state law requirements

Some U.S. state privacy laws require specific disclosures.

This Privacy Policy is designed to help you understand how Google handles your information:

We explain the categories of information Google collects and the sources of that information in Information Google collects.

We explain the purposes for which Google collects and uses information in Why Google collects data.

We explain when Google may disclose information in Sharing your information.

We explain how Google retains information in Retaining your information.

Qualifications & exceptions

• Applies to disclosures required by some U.S. state privacy laws.

Not stated here

• Which states' laws are meant is not listed here beyond the CCPA named in the following cards.

Sharing & Disclosure · Restriction or exception

Google says it does not sell your personal information and does not share it as the CCPA defines sharing

In the U.S. state law section Google states that it does not sell your personal information, and that it also does not share your personal information as that term is defined in the California Consumer Privacy Act (CCPA). The second statement uses the statute's defined meaning of share, which the policy does not reproduce; it is distinct from the ordinary-language sharing described in the Sharing section, where disclosures to processors, with consent and for legal reasons are set out.

Supporting quotations

Google does not sell your personal information. Google also does not “share” your personal information as that term is defined in the California Consumer Privacy Act (CCPA).

Qualifications & exceptions

• The no-share statement is limited to the CCPA's defined meaning of share; the Sharing section still describes disclosures Google makes.
• The CCPA is named by the policy; its definition is not supplied in this source.

Not stated here

• The CCPA definition of share is not part of this document.

Cross-references

• contrast (model-proposed): Google may share non-identifiable info publicly and with partners; some partners may set own cookies on your device — contrast: Google says it does not sell or CCPA-share personal information, while also allowing specific partners to collect information from your device with their own cookies for advertising and measurement; the first statement uses a statutory definition and the second concerns partner collection, so readers should weigh both.

Use & Processing · Company commitment

When Google anonymizes data, it keeps policies and technical measures to avoid re-identifying it

Google points to further information about how it anonymizes data and states that when it anonymizes data to protect your privacy, it maintains policies and technical measures to avoid re-identifying that information. The retention cards note that deleted data may be retained in anonymized form, so this commitment governs what happens to such data.

Supporting quotations

You can also learn more about how Google anonymizes data. As described there, when Google anonymizes data to protect your privacy, we maintain policies and technical measures to avoid re-identifying that information.

Qualifications & exceptions

• Applies to data Google anonymizes to protect your privacy.

Not stated here

• The referenced page on how Google anonymizes data is not supplied.

Legal Rights & Agreement Rules · User right or choice

US state laws: rights to know, access, correct, delete, opt out of some profiling and targeted ads, no discrimination

Google describes the rights U.S. state privacy laws provide: to request information about how Google collects, uses and discloses your information; to access your information, sometimes in a portable format; to correct it; and to request that Google delete it. Many of these laws also provide the right to opt out of certain forms of profiling and targeted advertising, and the right not to be discriminated against for exercising these privacy rights. Google adds that the CCPA treats certain kinds of information, like health data, as sensitive, and that when users provide such information Google uses it only for purposes the CCPA permits, such as providing services users request and expect.

Supporting quotations

U.S. state privacy laws also provide the right to request information about how Google collects, uses, and discloses your information. And they give you the right to access your information, sometimes in a portable format; correct your information; and to request that Google delete that information. Many of these laws also provide the right to opt out of certain forms of profiling and targeted advertising. They also provide the right to not be discriminated against for exercising these privacy rights.

Additionally, the CCPA treats certain kinds of information, like health data, as sensitive; when users provide this information, Google only uses it for purposes permitted by the CCPA, like to provide services that are requested and expected by our users.

Qualifications & exceptions

• Rights depend on the state law that applies to you; portability applies sometimes and the opt-out covers certain forms of profiling and targeted advertising.
• The CCPA sensitive-information limit applies when users provide such information.

Not stated here

• The policy does not list which states' laws apply or the exact scope of each right; the statutes are not supplied.

Legal Rights & Agreement Rules · User right or choice

Under Washington's My Health My Data Act and Nevada SB 370, health info needs withdrawable consent or legal permission

Google states that the Washington My Health My Data Act and Nevada Senate Bill 370 provide specific rights, in addition to the state rights above, that apply to health information. When you provide health information subject to these laws, Google processes it with your consent, which you may withdraw, or as otherwise permitted by these laws. The two statutes are named by the policy; their contents are not part of this source.

Supporting quotations

The Washington My Health My Data Act and Nevada Senate Bill 370 provide specific rights in addition to those rights above, that apply to health information. When you provide health information subject to these laws, Google processes it with your consent, which you may withdraw, or as otherwise permitted by these laws.

Qualifications & exceptions

• Applies to health information subject to those two laws.
• Processing may also proceed as otherwise permitted by these laws, not only on consent.

Not stated here

• The text and scope of the Washington and Nevada laws are not supplied; which users they cover is not stated here.

Account & Service Control · Procedure

You exercise these rights through account tools while signed in, or by contacting Google, and can ask it to reconsider

Google says the choices in Your privacy controls let you access, review, update and delete your information and export and download a copy of it, and that you can control what information it uses to show you ads, or turn off personalized ads, in My Ad Center. When you use these tools, Google validates your request by verifying that you are signed in to your Google Account. For questions or requests about your rights under U.S. state privacy laws, you or your authorized agent can also contact Google through a linked page. If you disagree with the decision on your request, you can ask Google to reconsider by responding to its email. Google also points to more information on its handling of CCPA requests.

Supporting quotations

These tools allow you to access, review, update and delete your information, as well as

a copy of it. You can also control what information we use to show you ads, or turn off personalized ads, by visiting

When you use these tools, we’ll validate your request by verifying that you’re signed in to your Google Account. If you have questions or requests related to your rights under U.S. state privacy laws, you (or your authorized agent) can also

And if you disagree with the decision on your request, you can ask Google to reconsider it by responding to our email.

We also provide more information on Google’s handling of CCPA requests.

Qualifications & exceptions

• Requests through the tools are validated by your being signed in; the policy does not describe verification for signed-out or agent requests here.
• Reconsideration is requested by replying to Google's email.

Not stated here

• The contact page, the CCPA request information and the export page are not supplied.

Data Access & Collection · Context

A state-law categories table reorganizes the policy's information, starting with identifiers and activity information

Because some U.S. state privacy laws require data practices to be described using specific categories, the policy includes a table that organizes its information under those categories, beginning with the categories of information Google collects. Among them is internet, network and other activity information such as search terms, views and interactions with content and ads, synced Chrome browsing history, app, browser and device interaction data like IP address and crash reports, and activity on third-party sites and apps that use Google services. The following cards record each category listed in this part of the table.

Supporting quotations

Some U.S. state privacy laws also require a description of data practices using specific categories. This table uses these categories to organize the information in this Privacy Policy.

Categories of information we collect

Internet, network, and other activity information such as your search terms; views and interactions with content and ads; Chrome browsing history you’ve synced with your Google Account; information about the interaction of your apps, browsers, and devices with our services (like IP address, crash reports, and system activity); and activity on third-party sites and apps that use our services.

Qualifications & exceptions

• The table reorganizes information already described elsewhere in the policy; it is not stated to add new practices.

Data Access & Collection · Company practice

Identifiers include name, password, phone, address, device identifiers, and optional ID documents for YouTube Studio

The identifiers category covers your name and password, phone number and address, and the unique identifiers tied to the browser, application or device you use. Some Google services, like YouTube Studio, offer the option to submit a valid ID such as a passport or driver's license to verify your identity in order to use additional features.

Supporting quotations

Identifiers and similar information such as your

and password, phone number, and address, as well as unique identifiers tied to the browser, application, or device you’re using. Some Google services like

provide the option to submit a valid ID (such as a passport or driver’s license) to verify your identity to use additional features.

Qualifications & exceptions

• Submitting a government ID is optional and tied to unlocking additional features in services like YouTube Studio.

Not stated here

• The linked YouTube Studio verification page and how ID documents are handled are not supplied.

Data Access & Collection · Company practice

Demographic info covers age, gender and language; optional creator features may add gender identity, race and ethnicity

The demographic category covers your age, gender and language. If you choose to use optional features like YouTube Creator Demographics, you can also provide additional information such as your gender identity or race and ethnicity.

Supporting quotations

Demographic information, such as your

you can also provide additional information, like your gender identity or race and ethnicity.

Qualifications & exceptions

• Gender identity, race and ethnicity are provided only if you choose to use optional features like YouTube Creator Demographics.

Not stated here

• The linked YouTube Creator Demographics page is not supplied.

Charges & Financial Obligations · Company practice

Commercial information covers your payment information and your purchase history on Google services

The commercial information category covers your payment information and a history of the purchases you make on Google's services.

Supporting quotations

Commercial information such as your

you make on Google’s services.

Data Access & Collection · Company practice

Biometric information is collected only if you choose to provide it, such as fingerprints in product studies

The biometric category applies if you choose to provide such information; the example is fingerprints provided in Google's product development studies.

Supporting quotations

Biometric information if you choose to provide it, such as fingerprints in Google’s product development studies.

Qualifications & exceptions

• Conditional on your choosing to provide it.

Data Access & Collection · Company practice

Activity category: search terms, content and ad interactions, synced Chrome history, device data, third-party activity

The internet, network and other activity information category covers your search terms; views and interactions with content and ads; Chrome browsing history you have synced with your Google Account; information about how your apps, browsers and devices interact with Google services, such as IP address, crash reports and system activity; and activity on third-party sites and apps that use Google services. Google says you can review and control activity data stored in your Google Account in My Activity.

Supporting quotations

Internet, network, and other activity information such as your search terms; views and interactions with content and ads; Chrome browsing history you’ve synced with your Google Account; information about the interaction of your apps, browsers, and devices with our services (like IP address, crash reports, and system activity); and activity on third-party sites and apps that use our services. You can review and control activity data stored in your Google Account in

Categories of information we collect

Qualifications & exceptions

• Chrome browsing history is included where synced with your Google Account.
• Review and control applies to activity data stored in your Google Account.

Data Access & Collection · Company practice

Geolocation data from GPS, IP address and sensors depends on settings and may include precise location

The geolocation category covers data that may be determined by GPS, IP address and other data from sensors on or around your device, depending in part on your device and account settings. Depending on those settings, it may include precise location data, for example GPS data for Android features like navigation or finding your phone. A page about Google's use of location information is referenced but not supplied.

Supporting quotations

Geolocation data, such as may be determined by GPS, IP address, and other data from sensors on or around your device, depending in part on your device and account settings. Depending on these settings, this may include precise location data, for example GPS data for Android features like navigation or finding your phone.

Qualifications & exceptions

• Collection of geolocation, and whether it is precise, depends in part on your device and account settings.

Not stated here

• The referenced page on Google's use of location information is not supplied.

Data Access & Collection · Company practice

Audio, electronic, visual and similar information includes media from your interactions

The audio, electronic, visual and similar information category includes media, such as images, files, audio and video, from your interactions with Google services.

Supporting quotations

Audio, electronic, visual, and similar information, including media (like images, files, audio and video) from your interactions

Data Access & Collection · Company practice

Communications data such as emails is collected if you use Google services to send and receive messages

The communications data category covers data such as emails, if you use Google services to send and receive messages.

Supporting quotations

Communications data, such as emails, if you use our services to send and receive messages.

Qualifications & exceptions

• Conditional on using Google services to send and receive messages.

Data Access & Collection · Company practice

Health information is collected only if you choose to provide it through health features like Fitbit or Pixel

The health information category applies if you choose to provide such information. Examples are your medical history, vital signs and health metrics like blood glucose levels, and other similar information about your physical or mental health, provided in the course of using Google services that offer health-related features, such as the Google Health Studies app, Fitbit or Pixel devices. The U.S. state law cards record the consent and purpose limits that apply to health data under the CCPA and the Washington and Nevada laws.

Supporting quotations

Health information if you choose to provide it, such as your medical history, vital signs and health metrics (like blood glucose levels), and other similar information related to your physical or mental health, in the course of using Google services that offer health-related features, such as the

Qualifications & exceptions

• Conditional on your choosing to provide it while using health-related features.
• Separate consent and purpose limits apply under the state laws named earlier in this section.

Not stated here

• The linked health studies page is not supplied.

Data Access & Collection · Company practice

Professional, employment and education information may come from you or from your school or employer's Google account

The professional, employment and education information category covers information you provide, or information maintained through an organization using Google services at which you study or work. For managed accounts this means the organization, not only you, is a source of this information.

Supporting quotations

Professional, employment, and education information, such as information

or that is maintained through an organization using Google services at which you study or work.

Qualifications & exceptions

• Organizational information applies to users who study or work at an organization using Google services.

Data Access & Collection · Company practice

Other information you create or provide includes photos, videos, emails, docs and spreadsheets, managed via Dashboard

The category of other information you create or provide covers content you create, upload or receive, such as photos and videos, emails, docs and spreadsheets. Google Dashboard lets you manage information associated with specific products.

Supporting quotations

Other information you create or provide, such as the content you create, upload, or receive (like photos and videos or emails, docs and spreadsheets).

allows you to manage information associated with specific products.

Not stated here

• The Dashboard page is not supplied.

Inference & Profiling · Company practice

Google draws inferences from the collected categories, such as your ads interest categories

The final category is inferences drawn from the information above, with your ads interest categories as the example. This records that Google derives new information about you, such as advertising interests, from the data it collects; the controls cards note that interests can be modified in My Ad Center.

Supporting quotations

Inferences drawn from the above, like your

ads interest categories

Not stated here

• Other kinds of inferences beyond ads interest categories are not named here.

Security & Safeguards · Company practice

Google uses and may disclose information to address security incidents and malicious or illegal activity

Among the business purposes for which information may be used or disclosed, Google lists protecting against security threats, abuse and illegal activity: it uses and may disclose information to detect, prevent and respond to security incidents, and to protect against other malicious, deceptive, fraudulent or illegal activity. Its example is that, to protect its services, Google may receive or disclose information about IP addresses that malicious actors have compromised.

Supporting quotations

Business purposes for which information may be used or disclosed

Protecting against security threats, abuse, and illegal activity: Google uses and may disclose information to detect, prevent and respond to security incidents, and for protecting against other malicious, deceptive, fraudulent, or illegal activity. For example, to protect our services, Google may receive or disclose information about IP addresses that malicious actors have compromised.

Qualifications & exceptions

• Disclosure is stated as may disclose, for security and anti-abuse purposes.

Not stated here

• To whom security-related information may be disclosed is not stated here.

Use & Processing · Company practice

For auditing and measurement, Google analyzes usage and may disclose non-identifiable information to partners

Under auditing and measurement, Google uses information for analytics and measurement to understand how its services are used and to fulfill obligations to partners like publishers, advertisers, developers or rights holders. It may disclose non-personally identifiable information publicly and with these partners, including for auditing purposes.

Supporting quotations

Auditing and measurement: Google uses information for analytics and measurement to understand how our services are used, as well as to fulfill obligations to our partners like publishers, advertisers, developers, or rights holders. We may disclose non-personally identifiable information publicly and with these partners, including for auditing purposes.

Qualifications & exceptions

• Disclosure to partners is of non-personally identifiable information.

Use & Processing · Company practice

Business purposes include maintaining services and research and development, including AI training on public information

Under maintaining its services, Google uses information to ensure services work as intended, such as tracking outages or troubleshooting bugs and other issues you report. Under research and development, Google uses information to improve its services and develop new products, features and technologies that benefit users and the public; its example is using publicly available information to help train Google's AI models and build products and features like Google Translate, Gemini Apps and Cloud AI capabilities.

Supporting quotations

Maintaining our services: Google uses information to ensure our services are working as intended, such as tracking outages or troubleshooting bugs and other issues that you report to us.

Research and development: Google uses information to improve our services and to develop new products, features and technologies that benefit our users and the public. For example, we use publicly available information to help train Google’s AI models and build products and features like Google Translate, Gemini Apps, and Cloud AI capabilities.

Qualifications & exceptions

• The AI-training example refers to publicly available information.

Not stated here

• What non-public information, if any, is used for model training is not stated here.

Sharing & Disclosure · Company practice

Google shares information with service providers acting on its behalf under the policy and confidentiality measures

Under use of service providers, Google shares information with service providers to perform services on its behalf, in compliance with this Privacy Policy and other appropriate confidentiality and security measures; its example is relying on service providers to help provide customer support.

Supporting quotations

Use of service providers: Google shares information with service providers to perform services on our behalf, in compliance with our Privacy Policy and other appropriate confidentiality and security measures. For example, we may rely on service providers to help provide customer support.

Qualifications & exceptions

• Providers act on Google's behalf under the policy and confidentiality and security measures.

Use & Processing · Company practice

Google processes identifiers, browsing and search activity, location and ad interactions to provide advertising

Under advertising, Google processes information to provide advertising, including online identifiers, browsing and search activity, and information about your location and your interactions with advertisements. Google says this keeps its services, and many of the websites and services you use, free of charge. You can control what information Google uses to show you ads in My Ad Center.

Supporting quotations

Advertising: Google processes information to provide advertising, including online identifiers, browsing and search activity, and information about your location and interactions with advertisements. This keeps Google’s services and many of the websites and services you use free of charge. You can control what information we use to show you ads by visiting your ad settings in

Qualifications & exceptions

• Ad information use is controllable through My Ad Center, and the earlier cards record the settings and limits on personalized ads.

Not stated here

• My Ad Center is not supplied.

Legal Rights & Agreement Rules · Company practice

Google uses information to satisfy laws and discloses it for legal process or government requests, including police

Under legal reasons, Google uses information to satisfy applicable laws or regulations, and discloses information in response to legal process or enforceable government requests, including to law enforcement. It points to its Transparency Report for the number and type of government requests it receives.

Supporting quotations

Legal reasons: Google also uses information to satisfy applicable laws or regulations, and discloses information in response to legal process or enforceable government requests, including to law enforcement. We provide information about the number and type of requests we receive from governments in our

Qualifications & exceptions

• Disclosure is in response to legal process or enforceable government requests; the Sharing section states Google's good-faith reasonable-necessity standard.

Not stated here

• The Transparency Report is not supplied.

Sharing & Disclosure · Company practice

Information may go to people you share with, consented third parties, processors, domain admins and law enforcement

The parties with whom information may be disclosed are: other people you choose to share with, such as through docs or photos, videos or comments on YouTube, or health information through Fitbit's social features and third-party applications; third parties with your consent, such as services that integrate with Google's services, with a linked page to review and manage third-party apps and sites that have access to your Google Account data; service providers, trusted businesses or persons processing information on Google's behalf under its instructions, the policy and confidentiality and security measures; domain administrators, if you work or study at an organization that uses Google services; and law enforcement or other third parties, for the legal reasons described in Sharing your information.

Supporting quotations

Parties with whom information may be disclosed

Other people with whom you choose to share your information, like docs or photos, videos or comments on YouTube, or health information through Fitbit’s social features and third party applications.

Third parties with your consent, such as services that integrate with Google’s services. You can

Service providers, trusted businesses, or persons that process information on Google’s behalf, based on our instructions and in compliance with our Privacy Policy and any other appropriate confidentiality and security measures.

if you work or study at an organization that uses Google services.

Law enforcement or other third parties, for the legal reasons described in Sharing your information.

Qualifications & exceptions

• Each party corresponds to an exception in the Sharing section; disclosure to law enforcement follows the legal-reasons standard stated there.
• Domain administrator access applies only to organization-managed accounts.

Not stated here

• The linked permissions and domain administrator pages are not supplied.

Cross-references

• related (model-proposed): Google does not share personal info outside Google except with consent, domain admins, processors or for legal reasons — references: The state-law parties table restates the recipients permitted by the sharing exceptions, adding law enforcement for the legal reasons.

Sharing & Disclosure · Company practice

Law enforcement and other third parties may receive information for the legal reasons in the Sharing section

The last party in the state-law table is law enforcement or other third parties, who may receive information for the legal reasons described in Sharing your information: Google's good-faith belief that disclosure is reasonably necessary to respond to law or governmental requests, enforce its Terms of Service, address fraud, security or technical issues, or protect against harm.

Supporting quotations

Law enforcement or other third parties, for the legal reasons described in Sharing your information.

Parties with whom information may be disclosed

Qualifications & exceptions

• Disclosure is limited to the legal reasons stated in the Sharing section.

Legal Rights & Agreement Rules · Context

The policy covers all Google LLC and affiliate services, including YouTube, Android and ads on third-party sites

This Privacy Policy applies to all services offered by Google LLC and its affiliates, including YouTube, Android, and services offered on third-party sites such as advertising services. It does not apply to services that have separate privacy policies that do not incorporate this Privacy Policy. For YouTube users, this is the statement that places YouTube under this policy.

Supporting quotations

When this policy applies

This Privacy Policy applies to all of the services offered by Google LLC and its affiliates, including YouTube, Android, and services offered on third-party sites, such as advertising services. This Privacy Policy doesn’t apply to services that have separate privacy policies that do not incorporate this Privacy Policy.

Qualifications & exceptions

• Services with their own privacy policies that do not incorporate this one are outside its scope.
• The policy does not list here which Google services have separate policies.

Cross-references

• related (model-proposed): Separate privacy notices add terms for Payments, Gemini Apps, YouTube Kids, Family Link child accounts and others — references: Services with separate, non-incorporating privacy policies fall outside this policy; the separate notices listed include YouTube Kids and Family Link child accounts.

Legal Rights & Agreement Rules · Restriction or exception

The policy excludes companies advertising Google services and other companies' products, even ones embedding Google

Google states that this Privacy Policy does not apply to the information practices of other companies and organizations that advertise its services, nor to services offered by other companies or individuals, including products or sites they offer that may include Google services to which the policy applies, products or sites displayed to you in search results, or products or sites linked from Google services. So when a third-party site embeds a Google service, this policy governs Google's handling of the data through that service, but not the third party's own practices.

Supporting quotations

This Privacy Policy doesn’t apply to:

The information practices of other companies and organizations that advertise our services

Services offered by other companies or individuals, including products or sites they offer that may include Google services to which the policy applies, or products or sites displayed to you in search results, or linked from our services

Qualifications & exceptions

• Google services embedded in another company's product remain covered as Google services; the other company's own practices are not.

Legal Rights & Agreement Rules · Company commitment

Google may change the policy but will not reduce your rights without explicit consent, and gives notice of changes

Google changes this Privacy Policy from time to time. It commits not to reduce your rights under the policy without your explicit consent. It always indicates the date the last changes were published and offers access to archived versions for review. If changes are significant, Google provides a more prominent notice, including, for certain services, email notification of Privacy Policy changes. The analyzed version is dated October 1, 2026; the archived versions are referenced but not supplied.

Supporting quotations

Changes to this policy

We change this Privacy Policy from time to time. We will not reduce your rights under this Privacy Policy without your explicit consent. We always indicate the date the last changes were published and we offer access to archived versions for your review. If changes are significant, we’ll provide a more prominent notice (including, for certain services, email notification of Privacy Policy changes).

Qualifications & exceptions

• Prominent notice applies to significant changes; email notification applies only for certain services.
• The no-reduction commitment is about rights under this policy and requires explicit consent to override.

Not stated here

• Which services receive email notification, and what counts as significant, are not stated.
• Archived versions are not supplied.

Cross-references

• related (model-proposed): This version is effective October 1, 2026; archived versions and a PDF copy are linked, not supplied — references: The change process explains the dated version line: Google marks the publication date of the last changes and keeps archived versions.

Legal Rights & Agreement Rules · Context

Separate privacy notices add terms for Payments, Gemini Apps, YouTube Kids, Family Link child accounts and others

Google lists privacy notices that provide additional information about some Google services: Payments, Fiber, Gemini Apps, Google Fi, Google Workspace for Education, Read Along, YouTube Kids, Google Accounts managed with Family Link for children under 13 (or the applicable age in your country), the Family Link privacy guide for children and teens, and Voice and Audio Collection from Children's Features on the Google Assistant. These notices are linked but not part of this source, so their terms, including those for YouTube Kids and child accounts, are not described here.

Supporting quotations

Specific Google services

The following privacy notices provide additional information about some Google services:

Payments

Fiber

Gemini Apps

Google Fi

Google Workspace for Education

Read Along

YouTube Kids

Google Accounts Managed with Family Link, for Children under 13 (or applicable age in your country)

Family Link privacy guide for children & teens

Voice and Audio Collection from Children’s Features on the Google Assistant

Qualifications & exceptions

• The notices are described as additional information about some services; the policy does not say here how they interact with this policy beyond the scope statement that services with separate, non-incorporating policies are excluded.

Not stated here

• None of the listed notices is supplied; the YouTube Kids and Family Link child notices in particular are not analyzed here.

Legal Rights & Agreement Rules · Context

Members of organizations using Google Workspace or Cloud Platform are referred to the Google Cloud Privacy Notice

If you are a member of an organization that uses Google Workspace or Google Cloud Platform, Google directs you to the Google Cloud Privacy Notice to learn how those services collect and use your personal information. That notice is linked but not supplied, so the data practices for organization-managed accounts are only partly described by this policy.

Supporting quotations

If you’re a member of an organization that uses Google Workspace or Google Cloud Platform, learn how these services collect and use your personal information in the

Qualifications & exceptions

• Applies to members of organizations using Google Workspace or Google Cloud Platform.

Not stated here

• The Google Cloud Privacy Notice is not supplied.

Account & Service Control · Context

Further resources: Google Account settings, Privacy Checkup, safety center, Teen Privacy Guide, technology pages

Google highlights resources for learning about its practices and privacy settings: your Google Account as the home of many account settings; the Privacy Checkup, which guides you through key privacy settings; Google's safety center on built-in security, privacy controls and family tools; Google's Teen Privacy Guide answering common privacy questions; Privacy & Terms for more context on this policy and the Terms of Service; and Technologies pages on how Google uses cookies, technologies used for advertising, and how Google uses information from sites or apps that use its services. These are references; none of the pages is part of this source.

Supporting quotations

Other useful resources

The following links highlight useful resources for you to learn more about our practices and privacy settings.

is home to many of the settings you can use to manage your account

guides you through key privacy settings for your Google Account

helps you learn more about our built-in security, privacy controls, and tools to help set digital ground rules for your family online

provides answers to some of the top questions we get asked about privacy

Privacy & Terms provides more context regarding this Privacy Policy and our Terms of Service

Technologies includes more information about:

How Google uses cookies

Technologies used for Advertising

How Google uses information from sites or apps that use our services

Not stated here

• The linked resource pages are not supplied.

Legal Rights & Agreement Rules · Context

Affiliates are Google group companies, including four named EU consumer-service entities

An affiliate is an entity that belongs to the Google group of companies. The definition names the companies providing consumer services in the EU: Google Ireland Limited, Google Commerce Ltd, Google Payment Corp and Google Dialer Inc, and links to a list of companies providing business services in the EU. Affiliates matter because the policy covers services offered by Google LLC and its affiliates and allows personal information to be provided to affiliates for processing.

Supporting quotations

Key terms

Affiliates

An affiliate is an entity that belongs to the Google group of companies, including the following companies that provide consumer services in the EU: Google Ireland Limited, Google Commerce Ltd, Google Payment Corp, and Google Dialer Inc.

Qualifications & exceptions

• The four named companies are those providing consumer services in the EU; business-service affiliates are listed only on an unsupplied page.

Not stated here

• The list of EU business-service affiliates is not supplied.

Data Access & Collection · Context

Defined terms: an algorithm is a computer's rule set; a device is any computer used to reach Google services

The key terms define an algorithm as a process or set of rules followed by a computer in performing problem-solving operations, and a device as a computer that can be used to access Google services, with desktop computers, tablets, smart speakers and smartphones all counting as devices. These definitions fix the meaning of the policy's statements about algorithms recognizing patterns in data and about device information and identifiers.

Supporting quotations

Algorithm

A process or set of rules followed by a computer in performing problem-solving operations.

Device

A device is a computer that can be used to access Google services. For example, desktop computers, tablets, smart speakers, and smartphones are all considered devices.

Qualifications & exceptions

• Device includes smart speakers, so device-based collection and identifiers extend beyond phones and computers.

Data Access & Collection · Context

Defined storage technologies: application data caches, browser web storage, and cookies that recognize your browser

The key terms define the storage technologies named in the collection section. An application data cache is a data repository on a device that can let a web application run offline and load content faster. Browser web storage lets websites store data in a browser on a device; in local storage mode the data persists across sessions and remains retrievable after the browser is closed and reopened, with HTML 5 named as one enabling technology. A cookie is a small file containing a string of characters sent to your computer when you visit a website; on a return visit it lets the site recognize your browser, and cookies may store user preferences and other information. You can configure your browser to refuse all cookies or indicate when one is sent, but some website features or services may not function properly without cookies. Pages on how Google uses cookies and partner-site data are referenced but not supplied.

Supporting quotations

Application data cache

An application data cache is a data repository on a device. It can, for example, enable a web application to run without an internet connection and improve the performance of the application by enabling faster loading of content.

Browser web storage

Browser web storage enables websites to store data in a browser on a device. When used in "local storage" mode, it enables data to be stored across sessions. This makes data retrievable even after a browser has been closed and reopened. One technology that facilitates web storage is HTML 5.

A cookie is a small file containing a string of characters that is sent to your computer when you visit a website. When you visit the site again, the cookie allows that site to recognize your browser. Cookies may store user preferences and other information. You can configure your browser to refuse all cookies or to indicate when a cookie is being sent. However, some website features or services may not function properly without cookies.

Qualifications & exceptions

• Refusing cookies is a browser-level choice with a stated functionality trade-off.

Not stated here

• The referenced pages on Google's cookie use and partner-site data use are not supplied.

Account & Service Control · Context

A Google Account is created with name, email and password, authenticates you, and can be edited or deleted anytime

You may access some Google services by signing up for a Google Account and providing some personal information, typically your name, email address and a password. Google uses this account information to authenticate you when you access its services and to protect your account from unauthorized access by others. You can edit or delete your account at any time through your Google Account settings.

Supporting quotations

Google Account

and providing us with some personal information (typically your name, email address, and a password). This account information is used to authenticate you when you access Google services and protect your account from unauthorized access by others. You can edit or delete your account at any time through your Google Account settings.

Qualifications & exceptions

• An account is needed for some services, not all.

Data Access & Collection · Context

An IP address is assigned to every connected device and can often identify the location it connects from

Every device connected to the Internet is assigned an Internet protocol (IP) address. These numbers are usually assigned in geographic blocks, and an IP address can often be used to identify the location from which a device is connecting. This explains why IP address appears among both the device data and the location data Google collects.

Supporting quotations

IP address

Every device connected to the Internet is assigned a number known as an Internet protocol (IP) address. These numbers are usually assigned in geographic blocks. An IP address can often be used to identify the location from which a device is connecting to the Internet.

Qualifications & exceptions

• Location identification from IP is stated as often possible, not always.

Not stated here

• The referenced page on how Google uses location information is not supplied.

Data Access & Collection · Context

Personal information identifies you or is reasonably linkable to you; non-identifiable information no longer does

Non-personally identifiable information is information recorded about users so that it no longer reflects or references an individually identifiable user. Personal information is information you provide that personally identifies you, such as your name, email address or billing information, or other data that Google can reasonably link to such information, such as information it associates with your Google Account. The second limb means data tied to your account counts as personal information even if it is not itself identifying, which is why the collection section says account-stored data is treated as personal information.

Supporting quotations

Non-personally identifiable information

This is information that is recorded about users so that it no longer reflects or references an individually-identifiable user.

Personal information

This is information that you provide to us which personally identifies you, such as your name, email address, or billing information, or other data that can be reasonably linked to such information by Google, such as information we associate with your Google Account.

Qualifications & exceptions

• Personal information includes data reasonably linkable by Google to identifying information, not only the identifying details themselves.

Cross-references

• related (model-proposed): Google does not share personal info outside Google except with consent, domain admins, processors or for legal reasons — defines: The personal information protected by the no-sharing rule includes data reasonably linkable to you, such as account-associated information; non-personally identifiable information is a separate category Google may share.

Data Access & Collection · Context

Personal information is identifying data you provide, plus data Google can reasonably link to it, such as account data

Personal information is defined as information you provide that personally identifies you, such as your name, email address or billing information, or other data that Google can reasonably link to such information, such as information it associates with your Google Account. The definition's second limb brings account-associated data within personal information even when the data itself is not identifying.

Supporting quotations

This is information that you provide to us which personally identifies you, such as your name, email address, or billing information, or other data that can be reasonably linked to such information by Google, such as information we associate with your Google Account.

Personal information

Qualifications & exceptions

• Covers both identifying details you provide and data reasonably linkable to them by Google.

Data Access & Collection · Context

Pixel tags track views and email opens, often with cookies; a referrer URL tells a page where your browser came from

A pixel tag is a technology placed on a website or in the body of an email to track certain activity, such as views of a website or when an email is opened, and pixel tags are often used together with cookies. A referrer URL is information a web browser transmits to a destination page, typically when you click a link to it, containing the URL of the last webpage the browser visited. Both terms appear in the collection section: pixel tags among collection technologies and referrer URL among request data Google collects.

Supporting quotations

Pixel tag

A pixel tag is a type of technology placed on a website or within the body of an email for the purpose of tracking certain activity, such as views of a website or when an email is opened. Pixel tags are often used in combination with cookies.

Referrer URL

A Referrer URL (Uniform Resource Locator) is information transmitted to a destination webpage by a web browser, typically when you click a link to that page. The Referrer URL contains the URL of the last webpage the browser visited.

Data Access & Collection · Context

Sensitive personal information: medical facts, racial or ethnic origin, political or religious beliefs, sexuality

Sensitive personal information is defined as a particular category of personal information relating to topics such as confidential medical facts, racial or ethnic origins, political or religious beliefs, or sexuality. The sharing section states Google asks for explicit consent before sharing sensitive personal information, and the ads cards record that personalized ads are not based on sensitive categories.

Supporting quotations

Sensitive personal information

This is a particular category of personal information relating to topics such as confidential medical facts, racial or ethnic origins, political or religious beliefs, or sexuality.

Qualifications & exceptions

• The listed topics are examples introduced with such as.

Cross-references

• related (model-proposed): Google shares personal info outside Google with your consent, and asks explicit consent for sensitive information — defines: Sensitive personal information, for which Google requires explicit consent before sharing, is defined as medical facts, racial or ethnic origin, political or religious beliefs, or sexuality.

Data Access & Collection · Context

Server logs record each request: IP address, browser type and language, time, and browser-identifying cookies

Like most websites, Google's servers automatically record the page requests made when you visit its sites. These server logs typically include your web request, Internet Protocol address, browser type, browser language, the date and time of your request, and one or more cookies that may uniquely identify your browser. The policy walks through a sample log entry for a search for cars: the IP address assigned by the user's ISP, which may change each connection depending on the service; the date and time of the query; the requested URL including the search query; the browser and operating system; and the unique cookie ID assigned to that computer on its first visit to Google, which is replaced by a new ID if the user deletes the cookie.

Supporting quotations

Server logs

Like most websites, our servers automatically record the page requests made when you visit our sites. These “server logs” typically include your web request, Internet Protocol address, browser type, browser language, the date and time of your request, and one or more cookies that may uniquely identify your browser.

A typical log entry for a search for “cars” looks like this:

123.45.67.89 - 25/Mar/2003 10:15:32 - http://www.google.com/search?q=cars - Chrome 112; OS X 10.15.7 - 740674ce2123e969

123.45.67.89 is the Internet Protocol address assigned to the user by the user’s ISP. Depending on the user’s service, a different address may be assigned to the user by their service provider each time they connect to the Internet.

25/Mar/2003 10:15:32 is the date and time of the query.

http://www.google.com/search?q=cars is the requested URL, including the search query.

Chrome 112; OS X 10.15.7 is the browser and operating system being used.

740674ce2123a969 is the unique cookie ID assigned to this particular computer the first time it visited Google. (Cookies can be deleted by users. If the user has deleted the cookie from the computer since the last time they’ve visited Google, then it will be the unique cookie ID assigned to their device the next time they visit Google from that particular device).

Qualifications & exceptions

• The cookie ID is tied to the device and resets if the cookie is deleted; the IP address may change between connections depending on the user's service.

Data Access & Collection · Context

Unique identifiers tag a browser, app or device for security, syncing, preferences and ads, e.g. the Advertising ID

A unique identifier is a string of characters that can uniquely identify a browser, app or device; identifiers vary in how permanent they are, whether users can reset them, and how they can be accessed. They are used for purposes including security and fraud detection, syncing services such as your email inbox, remembering your preferences, and providing personalized advertising; identifiers stored in cookies, for example, let sites display content in your preferred language, and you can configure your browser to refuse all cookies or flag them. On platforms other than browsers, identifiers recognize a specific device or app: the Advertising ID provides relevant advertising on Android devices and can be managed in device settings, and manufacturers may build identifiers into devices (a universally unique ID or UUID, such as a phone's IMEI number), which can be used to customize Google's service to your device or analyze device issues.

Supporting quotations

Unique identifiers

A unique identifier is a string of characters that can be used to uniquely identify a browser, app, or device. Different identifiers vary in how permanent they are, whether they can be reset by users, and how they can be accessed.

Unique identifiers can be used for various purposes, including security and fraud detection, syncing services such as your email inbox, remembering your preferences, and providing personalized advertising. For example, unique identifiers stored in cookies help sites display content in your browser in your preferred language. You can configure your browser to refuse all cookies or to indicate when a cookie is being sent.

On other platforms besides browsers, unique identifiers are used to recognize a specific device or app on that device. For example, a unique identifier such as the Advertising ID is used to provide relevant advertising on Android devices, and can be managed in your device’s settings. Unique identifiers may also be incorporated into a device by its manufacturer (sometimes called a universally unique ID or UUID), such as the IMEI-number of a mobile phone. For example, a device’s unique identifier can be used to customize our service to your device or analyze device issues related to our services.

Qualifications & exceptions

• Identifiers differ in permanence and resettability; the Advertising ID is manageable in Android device settings, while manufacturer identifiers like the IMEI are built into the device.
• A page on how Google uses cookies is referenced but not supplied.

Not stated here

• Whether and how manufacturer identifiers can be reset is not stated.

Data Access & Collection · Company practice

History settings save activity with a general area of at least 3 sq km or 1,000 people; past areas may inform results

If you are signed in and have Search Services History or Web & App Activity turned on, your activity on Google sites, apps and services that use those settings may be saved as history in your Google Account. Some activity may include information about the general area you were in when using the service; when you search using a general area, the search uses an area of at least 3 square kilometres, or expands until it represents the locations of at least 1,000 people, which Google says protects your privacy. In some cases, depending on personalization settings like Personalized Recommendations in Search services, areas you searched from in the past may be used to estimate a relevant location for a search, for example showing Chelsea results after you searched for coffee shops while in Chelsea. You can view and control Search Services History and Web & App Activity at My Activity.

Supporting quotations

Additional Context

Activity on Google Services

For example, if you’re signed in to your Google Account and have Search Services History or Web & App Activity turned on, your activity data on Google sites, apps, and services that use those settings may be saved as history in your Google Account. Some activity may include information about the general area you were in when using the Google service. When you search for something using a general area, your search will use an area of at least 3 sq km, or expand until the area represents the locations of at least 1,000 people. This helps protect your privacy.

like Personalized Recommendations in Search services, areas that you have searched from in the past may be used to estimate a relevant location for your search. For example, if you search for coffee shops while in Chelsea, Google might show results for Chelsea in future searches.

You can view and control your Search Services History and Web & App Activity at

Qualifications & exceptions

• Saving as history depends on being signed in with Search Services History or Web & App Activity on.
• Location estimation from past search areas depends on personalization settings and applies in some cases.

Not stated here

• The personalization settings and My Activity pages are not supplied.

Data Access & Collection · Company practice

Sites and apps using Google ads or analytics share data with Google in any browser mode; Incognito does not stop this

Websites and apps that integrate Google services like ads and analytics share information with Google. This sharing happens regardless of which browser or browser mode you use: although Incognito mode in Chrome can help keep your browsing private from other people who use your device, third-party sites and apps that integrate Google services still share information with Google when you visit them. The definition of activity on other sites and apps adds that, depending on your account settings and the products in use, this data may be associated with your personal information. Google points to a page on ways to control the information shared when you interact with such sites and apps; it is not supplied.

Supporting quotations

activity on third-party sites and apps that use our services

Websites and apps that integrate Google services like ads and analytics share information with us.

This information is shared regardless of which browser or browser mode you use. For example, although Incognito mode in Chrome can help keep your browsing private from other people who use your device, third party sites and apps that integrate our services still share information with Google when you visit them.

You can learn more about some of the ways you can control the information that is shared when you visit or interact with sites and apps that use Google services.

These services may share information about your activity with Google and, depending on your

Qualifications & exceptions

• Incognito limits visibility to other users of your device; it does not limit what integrated Google services receive.
• Association with your personal information depends on your account settings and the products in use.

Not stated here

• The referenced controls page for sites and apps using Google services is not supplied.

Cross-references

• qualifies (model-proposed): You can use many services signed out, use Incognito, and adjust settings on what Google saves to your account — qualifies: Incognito keeps browsing private from other device users only; sites integrating Google services still share information with Google in any browser mode.

Inference & Profiling · Company practice

Watching baking videos on YouTube may bring baking ads across the web; IP address may localize ads

Illustrating the ads Google considers most useful, the policy says that if you watch videos about baking on YouTube you may see more ads related to baking as you browse the web, and that Google may also use your IP address to determine your approximate location so it can serve ads for a nearby pizza delivery service if you search for pizza. Pages about Google ads and why you see particular ads are linked but not supplied.

Supporting quotations

ads you’ll find most useful

For example, if you watch videos about baking on YouTube, you may see more ads that relate to baking as you browse the web. We also may use your IP address to determine your approximate location, so that we can serve you ads for a nearby pizza delivery service if you search for “pizza.”

Qualifications & exceptions

• Stated as may; personalized ads remain subject to the settings and limits recorded in the ads cards.

Not stated here

• The linked pages about Google ads are not supplied.

Inference & Profiling · Company practice

Google may use your IP address to estimate your approximate location and serve nearby ads

Among the examples of ads it considers most useful, Google says it may use your IP address to determine your approximate location so that it can serve you ads for a nearby pizza delivery service if you search for pizza. Together with the YouTube baking example in the previous card, this shows two inputs to ad selection: interest signals from your activity and approximate location from your connection. Pages about Google ads and why you see particular ads are linked but not supplied.

Supporting quotations

We also may use your IP address to determine your approximate location, so that we can serve you ads for a nearby pizza delivery service if you search for “pizza.” Learn more

ads you’ll find most useful

Qualifications & exceptions

• Stated as may use; the location derived is approximate.

Not stated here

• The linked pages about Google ads and why you see particular ads are not supplied.

Sharing & Disclosure · Company practice

Merchants may upload loyalty data for search, shopping and campaign measurement; advertisers get only aggregated reports

Explaining the advertising and research services it provides on partners' behalf, Google says merchants may upload data from their loyalty-card programs so they can include loyalty information in search or shopping results, or better understand the performance of their ad campaigns. Google states that it provides advertisers only aggregated reports that do not reveal information about individual people.

Supporting quotations

advertising and research services on their behalf

For example, merchants may upload data from their loyalty-card programs so that they can include loyalty information in search or shopping results, or better understand the performance of their ad campaigns. We only provide aggregated reports to advertisers that don’t reveal information about individual people.

Qualifications & exceptions

• Reports to advertisers are aggregated and, per Google, do not reveal information about individuals.
• This concerns partner-supplied data, as described in the collection section's partner-sources card.

Data Access & Collection · Context

Android devices with Google apps include phones, cameras, vehicles, wearables and TVs running Google Play Services

Android devices with Google apps include devices sold by Google or one of its partners, and include phones, cameras, vehicles, wearables and televisions. These devices use Google Play Services and other pre-installed apps that include services like Gmail, Maps, the phone's camera and dialer, text-to-speech conversion, keyboard input and security features. The collection section states that such a device periodically contacts Google servers with information about the device and its connection to Google services, so the definition sets the scope of that periodic reporting.

Supporting quotations

Android device with Google apps

Android devices with Google apps include devices sold by Google or one of our partners and include phones, cameras, vehicles, wearables, and televisions. These devices use Google Play Services and other pre-installed apps that include services like Gmail, Maps, your phone’s camera and phone dialer, text-to-speech conversion, keyboard input, and security features.

If you’re using an Android device with Google apps, your device periodically contacts Google servers to provide information about your device and connection to our services.

Qualifications & exceptions

• The definition extends beyond phones to cameras, vehicles, wearables and televisions sold by Google or partners.

Not stated here

• The linked Google Play Services page is not supplied.

Use & Processing · Company practice

Delivering services: IP to send requested data, cookies to authenticate you, purchase details to fulfil orders

Google's examples of using information to deliver its services: it uses the IP address assigned to your device to send you the data you requested, such as loading a YouTube video; it uses unique identifiers stored in cookies on your device to help authenticate you as the person who should have access to your Google Account; photos and videos you upload to Google Photos are used to help you create albums, collages and other creations you can share; a flight confirmation email you receive may be used to create a check-in button in Gmail; and when you buy services or physical goods from Google, information like your shipping address or delivery instructions is used to process, fulfil and deliver your order and to provide support for what you bought.

Supporting quotations

deliver our services

Examples of how we use your information to deliver our services include:

We use the IP address assigned to your device to send you the data you requested, such as loading a YouTube video

We use unique identifiers stored in cookies on your device to help us authenticate you as the person who should have access to your Google Account

Photos and videos you upload to Google Photos are used to help you create albums, collages, and other creations that you can share.

A flight confirmation email you receive may be used to create a “check-in” button that appears in your Gmail

When you purchase services or physical goods from us, you may provide us information like your shipping address or delivery instructions. We use this information for things like processing, fulfilling, and delivering your order, and to provide support in connection with the product or service you purchase.

Qualifications & exceptions

• The Gmail check-in example shows email content being read to generate features; the policy states it as may be used.

Account & Service Control · Company practice

If Google detects spam, malware, illegal content or other abuse, it may disable your account or report to authorities

When Google detects spam, malware, illegal content, including child sexual abuse and exploitation material, and other forms of abuse on its systems in violation of its policies, it may disable your account or take other appropriate action. In certain circumstances it may also report the violation to appropriate authorities. The detection itself comes from the automated content analysis described in the purposes section.

Supporting quotations

detect abuse

When we detect spam, malware, illegal content (including

, and other forms of abuse on our systems in violation of our policies, we may disable your account or take other appropriate action. In certain circumstances, we may also report the violation to appropriate authorities.

Qualifications & exceptions

• Action follows abuse on Google's systems in violation of its policies; both account disabling and reporting are stated as may.
• Reporting to authorities applies in certain circumstances, which the policy does not specify.

Not stated here

• Which authorities, and in which circumstances, are not stated; the linked child-protection page is not supplied.

Use & Processing · Company practice

Device information helps you pick a device for Play installs or purchases and helps protect your account

As an example of using information from your devices, Google says it can help you decide which device to use to install an app or view a movie you buy from Google Play, and that it also uses this information to help protect your account.

Supporting quotations

devices

For example, we can use information from your devices to help you decide which device you’d like to use to install an app or view a movie you buy from Google Play. We also use this information to help protect your account.

Use & Processing · Company practice

Google analyzes ad interactions to improve ads, monitors systems, and reviews past activity to fix feature problems

Illustrating ensure and improve, Google says it analyzes how people interact with advertising to improve the performance of its ads. Illustrating ensuring that services work as intended, it continuously monitors its systems for problems and, when something is wrong with a specific feature, reviews activity information collected before the problem started so it can fix things more quickly.

Supporting quotations

ensure and improve

For example, we analyze how people interact with advertising to improve the performance of our ads.

ensure our services are working as intended

For example, we continuously monitor our systems to look for problems. And if we find something wrong with a specific feature, reviewing activity information collected before the problem started allows us to fix things more quickly.

Qualifications & exceptions

• Troubleshooting uses activity information already collected before a problem began.

Data Access & Collection · Company practice

With Google Location services on Android, your device sends location, sensor, cell tower and Wi-Fi details to Google

If you use Google's Location services on Android, Google says it can improve the performance of apps that rely on your location, like Google Maps. When you use these services, your device sends Google information about its location, its sensors such as the accelerometer, and nearby cell towers and Wi-Fi access points, including MAC address and signal strength, all of which help determine your location. You can use your device settings to enable Google Location services; a help page is linked but not supplied.

Supporting quotations

Information about things near your device

If you use Google’s Location services on Android, we can improve the performance of apps that rely on your location, like Google Maps. If you use Google’s Location services, your device sends information to Google about its location, sensors (like accelerometer), and nearby cell towers and Wi-Fi access points (like MAC address and signal strength). All these things help to determine your location. You can use your device settings to enable Google Location services.

Qualifications & exceptions

• Conditional on using Google's Location services, which are enabled through device settings.

Not stated here

• The linked Android location help page is not supplied.

Legal Rights & Agreement Rules · Company commitment

Google's legal team reviews every government or court data request and pushes back on overly broad or improper ones

Explaining legal process and enforceable governmental requests, Google says that, like other technology and communications companies, it regularly receives requests from governments and courts around the world to disclose user data. It states that respect for the privacy and security of data you store with Google underpins its approach, that its legal team reviews each and every request regardless of type, and that it frequently pushes back when a request appears overly broad or does not follow the correct process. Its Transparency Report is linked but not supplied.

Supporting quotations

legal process, or enforceable governmental request

Like other technology and communications companies, Google regularly receives requests from governments and courts around the world to disclose user data. Respect for the privacy and security of data you store with Google underpins our approach to complying with these legal requests. Our legal team reviews each and every request, regardless of type, and we frequently push back when a request appears to be overly broad or doesn’t follow the correct process.

Qualifications & exceptions

• Push-back is described as frequent and triggered by overly broad or procedurally incorrect requests; it is not a promise to refuse any class of request.

Not stated here

• The Transparency Report is not supplied.

Use & Processing · Company practice

Google uses cookies to analyze how people use its services and redesigns features based on that analysis

As an example of making improvements, Google uses cookies to analyze how people interact with its services; that analysis can help it build better products, for example by discovering that a task takes people too long or that they cannot finish certain steps, after which it can redesign the feature for everyone.

Supporting quotations

make improvements

For example, we use cookies to analyze how people interact with our services. And that analysis can help us build better products. For example, it may help us discover that it’s taking people too long to complete a certain task or that they have trouble finishing steps at all. We can then redesign that feature and improve the product for everyone.

Linking & Identification · Company practice

Google Analytics data can be linked, by the customer and by Google, to cookies tied to visits to other sites and apps

Explaining may link information, Google gives the example of a Google Analytics customer who wants to use its Analytics data to create more relevant ads or further analyze its traffic. Using Google's systems, data generated through Google Analytics can be linked, both by the Analytics customer and by Google, to cookies and other technologies related to visits to other websites and apps. This is the mechanism behind the cross-site linking recorded in the measurement cards.

Supporting quotations

may link information

For example, a customer may want to use its Google Analytics data to create more relevant ads, or to further analyze its traffic. Using our systems, data generated through Google Analytics can be linked by the Google Analytics customer and by Google to cookies and other technologies that are related to visits to other websites and apps.

Qualifications & exceptions

• Linking is stated as can be linked, by both the Analytics customer and Google.

Not stated here

• The linked Analytics help page is not supplied.

Data Access & Collection · Company practice

Media from microphone, camera and uploads is collected; on "Hey Google", voice plus a few seconds before it is recorded

The media category covers images, files, audio and video from your interactions. Google explains that you can interact with many services using your device's microphone or camera, or by uploading multimedia like files, images, screenshots, audio and video. When your device detects an audio activation command, like Hey Google, Google records your voice and audio plus a few seconds before the activation.

Supporting quotations

Media (like images, files, audio and video) from your interactions

For example, you can interact with many Google services using your device’s microphone or camera, or by uploading multimedia like files, images, screenshots, audio, and video. When your device detects an audio activation command, like “Hey Google,” Google records your voice and audio plus a few seconds before the activation.

Qualifications & exceptions

• Recording on activation includes a few seconds of audio before the activation command was detected.

Not stated here

• How long such recordings are retained is not stated in this block; the retention cards describe general rules.

Data Access & Collection · Company practice

You can interact with many Google services by microphone, camera or by uploading files, images, audio and video

The media category's explanation says you can interact with many Google services using your device's microphone or camera, or by uploading multimedia like files, images, screenshots, audio and video. The previous card records that on an audio activation command Google records your voice and audio plus a few seconds before the activation; this card records the input channels through which media from your interactions reaches Google.

Supporting quotations

For example, you can interact with many Google services using your device’s microphone or camera, or by uploading multimedia like files, images, screenshots, audio, and video.

Media (like images, files, audio and video) from your interactions

Qualifications & exceptions

• Media is collected through the channels you use: microphone, camera and uploads.

Sharing & Disclosure · Company practice

Google shares data about content-removal requests with Lumen for research into users' rights

Explaining its users, Google gives the example that, to prevent abuse and increase transparency and accountability over its content moderation practices, it shares data about requests for removal of content from its services with Lumen, an organization that collects and analyzes such requests to facilitate research helping Internet users understand their rights. A help page is linked but not supplied.

Supporting quotations

our users

For example, to prevent abuse and increase transparency and accountability over our online content moderation practices, Google shares data about requests for removal of content from our services with Lumen, which collects and analyzes these requests to facilitate research to help Internet users understand their rights.

Qualifications & exceptions

• Concerns data about content-removal requests, not user content generally.

Not stated here

• What personal details, if any, the shared request data contains is not stated; the linked page is not supplied.

Sharing & Disclosure · Context

Over 2 million non-Google websites and apps partner with Google to show ads; ad technologies are explained elsewhere

Google states that over 2 million non-Google websites and apps partner with it to show ads. For the performance of advertisers' ad campaigns, it points to a page about the technologies used for advertising. Both linked pages are outside this source.

Supporting quotations

partner with Google

There are over 2 million non-Google websites and apps that partner with Google to show ads.

Performance of their ad campaigns.

Learn more about the technologies used for advertising.

Not stated here

• The linked pages on controlling ads and on advertising technologies are not supplied.

Charges & Financial Obligations · Company practice

A saved payment method works across services; Google may ask a tax ID, verify identity, and use it to confirm age

If you add a credit card or other payment method to your Google Account, you can use it to buy things across Google services, like apps in the Play Store. Google may also ask for other information, like a business tax ID, to help process your payment, and in some cases may need to verify your identity and ask for information to do so. Google may also use payment information to verify that you meet age requirements, for example if you enter an incorrect birthday indicating you are not old enough to have a Google Account.

Supporting quotations

payment information

For example, if you add a credit card or other payment method to your Google Account, you can use it to buy things across our services, like apps in the Play Store. We may also ask for other information, like a business tax ID, to help process your payment. In some cases, we may also need to verify your identity and may ask you for information to do this.

We may also use payment information to verify that you meet age requirements, if, for example, you enter an incorrect birthday indicating you’re not old enough to have a Google Account.

Qualifications & exceptions

• Identity verification applies in some cases; age verification through payment information is an example use stated as may.

Not stated here

• The linked age-requirements page is not supplied.

Inference & Profiling · Company practice

You may also see personalized ads based on an advertiser's own information, such as your visit to its website

Besides Google's own signals, you may see personalized ads based on information from the advertiser. Google's example is that if you shopped on an advertiser's website, the advertiser can use that visit information to show you ads.

Supporting quotations

personalized ads

You may also see personalized ads based on information from the advertiser. If you shopped on an advertiser's website, for example, they can use that visit information to show you ads.

Qualifications & exceptions

• The advertiser, not Google, supplies the visit information in this example.

Not stated here

• The linked page on why you see particular ads is not supplied.

Account & Service Control · Company practice

An added phone number may be used, by your settings, for account recovery, helping people find you, and ad relevance

If you add your phone number to your account, it can be used for different purposes across Google services depending on your settings: to help you access your account if you forget your password, to help people find and connect with you, and to make the ads you see more relevant to you. A help page about these uses is linked but not supplied.

Supporting quotations

phone number

If you add your phone number to your account, it can be used for different purposes across Google services, depending on your settings. For example, your phone number can be used to help you access your account if you forget your password, help people find and connect with you, and make the ads you see more relevant to you.

Qualifications & exceptions

• Uses depend on your settings; ad relevance is one of the listed uses.

Not stated here

• Which settings govern each use is not stated here.

Data Access & Collection · Company practice

Saved home and work addresses are used for directions, nearby results and ads; you can edit or delete them anytime

You might choose to save places that are important to you, such as your home or work, to your Google Account. If you set your home or work addresses, Google can use them to help you do things more easily, such as getting directions or finding results closer to home or work, and for ads. You can edit or delete your home or work addresses at any time in your Google Account.

Supporting quotations

Places you label like home and work

You might choose to save places to your Google Account that are important to you, such as your home or your work. If you set your home or work addresses, they can be used to help you do things more easily, such as getting directions or finding results closer to your home or work, and for ads.

You can edit or delete your home or work addresses anytime in your

Qualifications & exceptions

• Saving these places is your choice; once set, they are used for ads as well as directions and nearby results.

Security & Safeguards · Company practice

Security threat information lets Google notify you if it thinks your account was compromised and help you secure it

Explaining protect against abuse, Google says information about security threats can help it notify you if it thinks your account has been compromised, at which point it can help you take steps to protect your account.

Supporting quotations

protect against abuse

For example, information about security threats can help us notify you if we think your account has been compromised (at which point we can help you take steps to protect your account).

Data Access & Collection · Company practice

Google may collect publicly available information to train its AI models and may index business information found online

Explaining publicly accessible sources, Google says it may collect information that is publicly available online or from other public sources to help train its AI models and build products and features like Google Translate, Gemini Apps and Cloud AI capabilities. It also says that if your business's information appears on a website, it may index and display that information on Google services.

Supporting quotations

publicly accessible sources

For example, we may collect information that’s publicly available online or from other public sources to help train Google’s AI models and build products and features like Google Translate, Gemini Apps, and Cloud AI capabilities. Or, if your business’s information appears on a website, we may index and display it on Google services.

Qualifications & exceptions

• AI training here is tied to publicly available information; both uses are stated as may.

Not stated here

• How publicly available information about individuals is treated in model training is not described beyond this statement.

Data Access & Collection · Context

The lbcs cookie lets you open many Google Docs in one browser; blocking it stops Docs working as expected

As an example of a cookie that services rely on, Google uses a cookie called lbcs that makes it possible to open many Google Docs in one browser, and says blocking this cookie would prevent Google Docs from working as expected. This illustrates the trade-off stated in the browser-controls card.

Supporting quotations

For example, we use a cookie called ‘lbcs’ that makes it possible for you to open many Google Docs in one browser. Blocking this cookie would prevent Google Docs from working as expected.

Security & Safeguards · Company practice

Google analyzes IP addresses and cookies against spam, click fraud and DDoS; Gmail shows recent access IPs and locations

Google's examples of keeping services safe and reliable: it collects and analyzes IP addresses and cookie data to protect against automated abuse, which takes forms such as sending spam to Gmail users, stealing money from advertisers by fraudulently clicking on ads, or censoring content through a Distributed Denial of Service (DDoS) attack. The last account activity feature in Gmail can help you find out if and when someone accessed your email without your knowledge by showing recent activity such as the IP addresses that accessed your mail, the associated location, and the date and time of access.

Supporting quotations

safety and reliability

Some examples of how we use your information to help keep our services safe and reliable include:

Collecting and analyzing IP addresses and cookie data to protect against automated abuse. This abuse takes many forms, such as sending spam to Gmail users, stealing money from advertisers by fraudulently clicking on ads, or censoring content by launching a Distributed Denial of Service (DDoS) attack.

The “last account activity” feature in Gmail can help you find out if and when someone accessed your email without your knowledge. This feature shows you information about recent activity in Gmail, such as the IP addresses that accessed your mail, the associated location, and the date and time of access.

Not stated here

• The linked Gmail sign-in activity page is not supplied.

Inference & Profiling · User right or choice

Personalized Recommendations uses your past activity for results; signed-out customization can be turned off

When you are signed in to your Google Account with the Personalized Recommendations in Search services control enabled, you can get more relevant search results based on your previous searches and activity from other Google services. You may also get customized search results even when signed out; if you do not want that level of customization, you can search and browse privately or turn off signed-out search customization. The linked help and opt-out pages are not supplied.

Supporting quotations

search results

For example, when you’re signed in to your Google Account and have the Personalized Recommendations in Search services control enabled, you can get more relevant search results that are based on your previous searches and activity from other Google services.

You may also get customized search results even when you’re signed out. If you don’t want this level of search customization, you can

Qualifications & exceptions

• Signed-in personalization depends on the Personalized Recommendations control; signed-out customization has its own opt-out.

Not stated here

• The linked pages for Personalized Recommendations, private search and the signed-out opt-out are not supplied.

Inference & Profiling · Restriction or exception

Personalized ads use interest topics from your activity, never sensitive categories; advertisers must do the same

When showing you personalized ads, Google uses topics it thinks might interest you based on your activity, for example Cooking and Recipes or Air Travel. It does not use topics or show personalized ads based on sensitive categories like race, religion, sexual orientation or health, and says it requires the same from advertisers that use its services. The advertiser policy it links is not supplied.

Supporting quotations

sensitive categories

When showing you personalized ads, we use topics that we think might be of interest to you based on your activity. For example, you may see ads for things like "Cooking and Recipes" or "Air Travel.” We don’t use topics or show personalized ads based on sensitive categories like race, religion, sexual orientation, or health. And we

Qualifications & exceptions

• The sensitive categories are examples introduced with like.
• The requirement on advertisers is stated by reference to a linked policy that is not supplied.

Not stated here

• The linked advertiser personalization policy is not supplied.

Cross-references

• related (model-proposed): Google does not personalize ads on sensitive categories or on your Drive, Gmail or Photos content — references: The additional-context entry restates the sensitive-category exclusion and extends it to advertisers using Google services.

Inference & Profiling · Restriction or exception

Ad personalization uses interest topics like Cooking and Recipes; advertisers must also avoid sensitive categories

Google personalizes ads using topics it thinks may interest you based on your activity, giving Cooking and Recipes and Air Travel as examples of the kind of topic you might see ads for. The sensitive-category exclusion recorded in the previous card is extended to advertisers: Google says it requires advertisers that use its services to follow the same rule, by reference to an advertiser policy that is not supplied.

Supporting quotations

When showing you personalized ads, we use topics that we think might be of interest to you based on your activity.

that use our services.

sensitive categories

Qualifications & exceptions

• The requirement on advertisers is stated by reference to a linked policy; its enforcement is not described here.

Not stated here

• The linked advertiser personalization policy is not supplied.

Data Access & Collection · Company practice

Device sensors such as the accelerometer and gyroscope help Google understand your speed and direction of travel

Your device may have sensors that can be used to better understand your location and movement. Google's examples are an accelerometer, used to determine your speed, and a gyroscope, used to figure out your direction of travel. This is the sensor data named among the location information Google collects. A page about how Google uses location information is referenced but not supplied.

Supporting quotations

Sensor data from your device

Your device may have sensors that can be used to better understand your location and movement. For example, an accelerometer can be used to determine your speed and a gyroscope to figure out your direction of travel.

Qualifications & exceptions

• Stated as may have sensors that can be used; applies to devices with such sensors.

Not stated here

• The referenced location information page is not supplied.

Legal Rights & Agreement Rules · Context

Google operates data centers around the world to keep its products continuously available

Explaining servers around the world, Google says it operates data centers located around the world to help keep its products continuously available for users. This is the basis for the transfers card: your information may be processed outside the country where you live.

Supporting quotations

servers around the world

For example, we operate data centers located

to help keep our products continuously available for users.

Not stated here

• The linked data center locations page is not supplied.

Data Access & Collection · Context

Call and message log collection covers Google Voice, Meet, Gmail, Chat, Duo and Google Fi

The services for making and receiving calls or sending and receiving messages, whose use triggers collection of call and message log information, include Google Voice (calls, text messages, voicemail), Google Meet (video calls), Gmail (email), Google Chat (messages), Google Duo (video calls and messages) and Google Fi (a phone plan).

Supporting quotations

services to make and receive calls or send and receive messages

Examples of these services include:

Google Voice, for making and receiving calls, sending text messages, and managing voicemail

Google Meet, for making and receiving video calls

Gmail, for sending and receiving emails

Google Chat, for sending and receiving messages

Google Duo, for making and receiving video calls and sending and receiving messages

Google Fi, for a phone plan

Qualifications & exceptions

• The list is introduced as examples of these services.

Sharing & Disclosure · Company practice

Google Trends samples web searches to estimate search popularity and publishes the results in aggregated form

Explaining show trends, Google says that when many people start searching for something it can provide useful information about trends at that time. Google Trends samples Google web searches to estimate the popularity of searches over a period and shares those results publicly in aggregated terms.

Supporting quotations

show trends

When lots of people start searching for something, it can provide useful information about particular trends at that time. Google Trends samples Google web searches to estimate the popularity of searches over a certain period of time and shares those results publicly in aggregated terms.

Qualifications & exceptions

• Results are published in aggregated terms.

Data Access & Collection · Company practice

Fitbit, Pixel Watch, Nest and Google Fit collect height, weight, sleep, heart rate, skin temperature, calories and steps

If you use fitness products and apps Google offers, such as Fitbit, Pixel Watch, Nest or Google Fit, Google collects data you provide, like your height and weight, and also collects information from these apps and devices, such as your sleep patterns, heart rate, skin temperature, calories burned and steps taken. This is the policy's explanation of similar information related to your physical or mental health in the health category.

Supporting quotations

similar information related to your physical or mental health

If you use fitness products and apps we offer, such as Fitbit, Pixel Watch, Nest or Google Fit, we collect data you provide, like your height and weight. We also collect information from these apps and devices, such as your sleep patterns, heart rate, skin temperature, calories burned, and steps taken.

Qualifications & exceptions

• Conditional on using Google's fitness products and apps.
• The health-data consent and purpose limits in the state-law cards apply to health information subject to those laws.

Account & Service Control · User right or choice

Deleting from specific services includes removing a Blogger blog, a Google Site you own, or Play Store reviews

As examples of deleting content from specific Google services, you can delete your blog from Blogger or a Google Site you own from Google Sites, and you can delete reviews you have left on apps, games and other content in the Play Store. The linked help pages are not supplied.

Supporting quotations

specific Google services

For example, you can delete

from Google Sites. You can also delete

you’ve left on apps, games, and other content in the Play Store.

Not stated here

• The linked Blogger, Sites and Play review help pages are not supplied.

Sharing & Disclosure · Company practice

YouTube creators and advertisers may use measurement companies' cookies to learn about their audiences; merchants too

Explaining specific partners, Google says it allows YouTube creators and advertisers to work with measurement companies to learn about the audience of their YouTube videos or ads, using cookies or similar technologies. Another example is merchants on Google's shopping pages, who use cookies to understand how many different people see their product listings. A page about these partners and how they use your information is referenced but not supplied. This is the concrete form of the sharing section's statement that specific partners may collect information from your browser or device.

Supporting quotations

specific partners

For example, we allow YouTube creators and advertisers to work with measurement companies to learn about the audience of their YouTube videos or ads, using cookies or similar technologies. Another example is merchants on our shopping pages, who use cookies to understand how many different people see their product listings.

Qualifications & exceptions

• Partner collection uses the partners' own cookies or similar technologies for audience measurement.

Not stated here

• Which measurement companies are involved and what they receive is described only on an unsupplied page.

Data Access & Collection · Restriction or exception

Chrome browsing history is saved to your account only if you have enabled Chrome synchronization

Your Chrome browsing history is saved to your Google Account only if you have enabled Chrome synchronization with your account. This conditions the activity-collection statements that list synced Chrome history among the data Google collects.

Supporting quotations

synced with your Google Account

Your Chrome browsing history is only saved to your account if you’ve enabled Chrome synchronization with your Google Account.

Qualifications & exceptions

• Applies to saving history to your Google Account; it does not address data Chrome handles locally.

Not stated here

• The linked Chrome sync help page is not supplied.

Cross-references

• qualifies (model-proposed): Activity data may include searches, videos watched, ad interactions, media, purchases, contacts, third-party activity — qualifies: Chrome browsing history enters the collected activity data only when Chrome synchronization with your Google Account is enabled.

Inference & Profiling · Company practice

Gmail suggests recipients based on the people you contact most frequently

Explaining the people who matter most to you online, Google says that when you type an address in the To, Cc or Bcc field of an email you are composing, Gmail suggests addresses based on the people you contact most frequently. This is an inference drawn from your communication patterns.

Supporting quotations

the people who matter most to you online

For example, when you type an address in the To, Cc, or Bcc field of an email you're composing, Gmail will suggest addresses based on the people you

Use & Processing · Company practice

Google processes content-removal requests to assess them and to ensure transparency and prevent abuse of the process

Explaining the public, Google says it processes information about requests to remove content from its services under its content removal policies or applicable law, in order to assess the request and to ensure transparency, improve accountability, and prevent abuse and fraud in these practices. Together with the Lumen card, this describes how removal requests themselves become processed data.

Supporting quotations

the public

For example, we process information about

from our services under Google's content removal policies or applicable law to assess the request, and to ensure transparency, improve accountability and prevent abuse and fraud in these practices.

Not stated here

• The linked removal request page is not supplied.

Use & Processing · Company practice

Google reports content-use statistics to rights holders and may process your info when people search your name

Explaining third parties, Google says it processes your information to report use statistics to rights holders about how their content was used in its services. It may also process your information when people search for your name and Google displays search results for sites containing publicly available information about you.

Supporting quotations

third parties

For example, we process your information to report use statistics to rights holders about how their content was used in our services. We may also process your information if people search for your name and we display search results for sites containing publicly available information about you.

Qualifications & exceptions

• Name-search processing concerns publicly available information on other sites, as the public-sources card describes.

Not stated here

• What the use statistics reported to rights holders contain is not stated.

Legal Rights & Agreement Rules · Context

The US state privacy laws named include the CCPA, VCDPA, CPA, CTDPA, UCPA, Washington MHMD, Nevada SB 370 and others

The policy lists the U.S. state privacy laws it refers to. The first part of the list names the California Consumer Privacy Act (CCPA), Virginia Consumer Data Protection Act (VCDPA), Colorado Privacy Act (CPA), Connecticut Act Concerning Personal Data Privacy and Online Monitoring (CTDPA), Utah Consumer Privacy Act (UCPA), Washington My Health My Data Act (MHDM), Nevada Senate Bill 370, Florida Digital Bill of Rights (FDBR), Texas Data Privacy and Security Act (TDPSA), Oregon Consumer Privacy Act (OCPA), Montana Consumer Data Privacy Act (MTCDPA), New Jersey Senate Bill 332 and New Hampshire Senate Bill 255. These are named external laws; their contents are not part of this source and the policy does not say which apply to a given user.

Supporting quotations

U.S. state privacy laws

These laws include:

California Consumer Privacy Act (CCPA);

Virginia Consumer Data Protection Act (VCDPA);

Colorado Privacy Act (CPA);

Connecticut Act Concerning Personal Data Privacy and Online Monitoring (CTDPA); and

Utah Consumer Privacy Act (UCPA)

Washington My Health My Data Act (MHDM)

Nevada Senate Bill 370

Florida Digital Bill of Rights (FDBR)

Texas Data Privacy and Security Act (TDPSA)

Oregon Consumer Privacy Act (OCPA)

Montana Consumer Data Privacy Act (MTCDPA)

New Jersey Senate Bill 332

New Hampshire Senate Bill 255

Qualifications & exceptions

• The list identifies laws by name only; the rights described earlier depend on which law applies to you.

Not stated here

• The statutes are not supplied and the policy does not state how applicability is determined.

Legal Rights & Agreement Rules · Context

The list continues with Nebraska, Iowa, Delaware, Tennessee, Minnesota, Maryland, Indiana, Kentucky and Rhode Island

The second part of the list of U.S. state privacy laws names the Nebraska Data Privacy Act (NEDPA), Iowa Consumer Data Protection Act (IACDPA), Delaware Personal Data Privacy Act (DPDPA), Tennessee Information Protection Act (TIPA), Minnesota Consumer Data Privacy Act (MNCDPA), Maryland Online Data Privacy Act of 2024 (MDODPA), Indiana Consumer Data Protection Act (INCDPA), Kentucky Consumer Data Protection Act (KCDPA) and Rhode Island Data Transparency and Privacy Protection Act (RIDTPPA). As with the first part, these are named external laws whose contents are not part of this source.

Supporting quotations

Nebraska Data Privacy Act (NEDPA)

Iowa Consumer Data Protection Act (IACDPA)

Delaware Personal Data Privacy Act (DPDPA)

Tennessee Information Protection Act (TIPA)

Minnesota Consumer Data Privacy Act (MNCDPA)

Maryland Online Data Privacy Act of 2024 (MDODPA)

Indiana Consumer Data Protection Act (INCDPA)

Kentucky Consumer Data Protection Act (KCDPA)

Rhode Island Data Transparency and Privacy Protection Act (RIDTPPA)

Qualifications & exceptions

• Names only; the policy does not describe each law's rights.

Not stated here

• The statutes are not supplied.

Linking & Identification · Company practice

By settings, signed-in Search shows Gmail and Calendar details, contacts autocomplete, and the Google app personalizes

Depending on your available settings, Google gives examples of using information across its services. When you are signed in and search on Google, you can see results from the public web together with relevant information from your content in other Google products like Gmail or Google Calendar, such as the status of upcoming flights, restaurant and hotel reservations, or your photos. If you have communicated with someone via Gmail, Google autocompletes their email address when you add them to a Google Doc or a Calendar event. The Google app can use data stored in other Google products to show personalized content, depending on your settings: with searches in Search Services History and Personalized Recommendations in Search services turned on, it can show news articles and information about your interests, like sports scores. If you connect your Google Account to Google Home, you can manage information and get things done through the Google Assistant, such as adding Calendar events, getting your schedule, flight status updates, or sending directions to your phone.

Supporting quotations

use the information we collect across our services

Depending on your available settings, some examples of how we use the information we collect across our services include:

When you’re signed in to your Google Account and search on Google, you can see search results from the public web, along with relevant information from the content you have in other Google products, like Gmail or Google Calendar. This can include things like the status of your upcoming flights, restaurant, and hotel reservations, or your photos.

If you have communicated with someone via Gmail and want to add them to a Google Doc or an event in Google Calendar, Google makes it easy to do so by autocompleting their email address when you start to type in their name. This feature makes it easier to share things with people you know.

The Google app can use data that you have stored in other Google products to show you personalized content, depending on your settings. For example, if you have searches stored in your Search Services History and have turned on your Personalized Recommendations in Search services setting, the Google app can show you news articles and other information about your interests, like sports scores, based on your activity.

If you connect your Google Account to your Google Home, you can manage your information and get things done through the Google Assistant. For example, you can add events to your Google Calendar or get your schedule for the day, ask for status updates on your upcoming flight, or send information like driving directions to your phone.

Qualifications & exceptions

• All examples are stated as depending on your available settings; the Google app example names Search Services History and Personalized Recommendations as the governing settings.
• The Google Home example applies if you connect your account to Google Home.

Not stated here

• The linked autocomplete and Google Home help pages are not supplied.

Linking & Identification · User right or choice

For users in the EU, your decisions on linking services affect how Google can use data across its services

Google states that if you are a user in the EU, the decisions you make on linking services will affect how certain Google services can use data across its services. This is a region-specific choice: EU users decide whether services are linked, and the cross-service uses described in this card group depend on those decisions. The policy does not describe the linking choices themselves here.

Supporting quotations

If you’re a user in the EU, the decisions you make on linking services will affect how certain Google services can use the data across our services.

Qualifications & exceptions

• Applies to users in the EU; affects certain Google services' cross-service data use.

Not stated here

• How linking decisions are made and which services they cover are not described in this document.

Cross-references

• qualifies (model-proposed): Google may use your information across services and devices; by settings, other-site activity may be tied to you — qualifies: For users in the EU, cross-service use of data by certain Google services depends on the user's service-linking decisions.

Data Access & Collection · Company practice

Google records ad views and interactions, including mouse movement over an ad, to give advertisers aggregated reports

Google collects information about views and interactions with ads so it can provide aggregated reports to advertisers, such as whether it served their ad on a page and whether the ad was likely seen by a viewer. It may also measure other interactions, such as how you move your mouse over an ad or whether you interact with the page on which the ad appears.

Supporting quotations

Views and interactions with content and ads

For example, we collect information about views and interactions with ads so we can provide aggregated reports to advertisers, like telling them whether we served their ad on a page and whether the ad was likely seen by a viewer. We may also measure other interactions, such as how you move your mouse over an ad or if you interact with the page on which the ad appears.

Qualifications & exceptions

• Reports to advertisers are aggregated; the measured signals include mouse movement and page interaction, stated as may measure.

Linking & Identification · Company practice

Partner sites using AdSense, Analytics or embedded YouTube may share your activity with Google and, by settings, link it

Your activity on other sites and apps might come from your use of Google services, such as syncing your account with Chrome, or from your visits to sites and apps that partner with Google. Many websites and apps partner with Google to improve their content and services, for example by using Google's advertising services like AdSense, analytics tools like Google Analytics, or embedding content such as YouTube videos. These services may share information about your activity with Google, and, depending on your account settings and the products in use, for instance when a partner uses Google Analytics together with Google's advertising services, this data may be associated with your personal information. Google points to a page about how it uses data on partners' sites and apps; it is not supplied.

Supporting quotations

your activity on other sites and apps

This activity might come from your use of Google services, like from syncing your account with Chrome or your visits to sites and apps that partner with Google. Many websites and apps partner with Google to improve their content and services. For example, a website might use our advertising services (like AdSense) or analytics tools (like Google Analytics), or it might embed other content (such as videos from YouTube). These services may share information about your activity with Google and, depending on your

and the products in use (for instance, when a partner uses Google Analytics in conjunction with our advertising services), this data may be associated with your personal information.

Learn more about how Google uses data when you use our partners' sites or apps.

Qualifications & exceptions

• Association with your personal information depends on your account settings and on the products the partner uses.
• Embedded YouTube videos on other sites are one route through which activity reaches Google.

Not stated here

• The referenced page on data use on partners' sites and apps is not supplied.