Google Gemini · Gemini Apps Privacy Notice

72-Hour Retention for Signed-Out Users

Medium severity
Share 𝕏 Share in Share

What it is

If you use Gemini without signing in to a Google Account, your conversation data may still be retained by Google for up to 72 hours.

Why it matters

Users who believe that using Gemini without an account makes their conversations anonymous or unretained are mistaken — Google still holds this data for three days, during which it may be reviewed or processed.

Institutional analysis (Compliance & legal intelligence)

Retention of data from unauthenticated users raises questions under GDPR's lawful basis requirements, as no account relationship exists to ground a contractual basis, and legitimate interest assessments must account for user expectations of anonymity. This is particularly relevant for EU/UK regulatory review.

🔒

Compliance intelligence locked

Regulatory citations, enforcement risk, and due diligence action items.

Watcher $9.99/mo Professional $149/mo

Watcher: regulatory citations. Professional: full compliance memo.

Consumer impact

Your conversations with Gemini, including any personal or sensitive information you share, may be reviewed by Google employees and used to train AI models. Chat history is retained for up to 18 months by default, and Google may use this data across its broader ecosystem of services. You can delete your Gemini conversation history by visiting myactivity.google.com and disabling or clearing Gemini Apps Activity.

Applicable agencies

  • FTC
    The FTC can investigate whether retaining data from users who have not created accounts and may reasonably expect anonymity constitutes an unfair or deceptive practice.
    File a complaint →

Provision details

Document information
Document
Gemini Apps Privacy Notice
Entity
Google Gemini
Document last updated
March 24, 2026
Tracking information
First tracked
March 24, 2026
Last verified
March 24, 2026
Record ID
CA-P-00326007
Document ID
CA-D-00326
Evidence Provenance
Source URL
Wayback Machine
SHA-256
4f9a44a4dd0d8a0933129028ac7d4d9cb50384d2926acfa670bfaf9c179f0f30
Verified
✓ Snapshot stored   ✓ Change verified
How to Cite
ConductAtlas Policy Archive
Entity: Google Gemini | Document: Gemini Apps Privacy Notice | Record: CA-P-00326007
Captured: 2026-03-24 07:23:23 UTC | SHA-256: 4f9a44a4dd0d8a09…
URL: https://conductatlas.com/platform/google-gemini/gemini-apps-privacy-notice/72-hour-retention-for-signed-out-users/
Accessed: April 4, 2026
Classification
Severity
Medium
Categories

Other provisions in this document