8 Total
5 High severity
3 Medium severity
0 Low severity
Summary

This is Google's privacy policy, which explains how Google collects and uses your personal information across all of its products — including Search, Gmail, YouTube, Maps, and Google Ads — covering data like your location, search history, voice recordings, and browsing activity. The most important thing to know is that Google combines your data across all its services to build a detailed profile used to target you with personalized ads, even when you are not signed in to a Google account. You can review and delete your activity data, manage ad personalization settings, and download your data at myaccount.google.com.

Technical Summary

This document is Google's global Privacy Policy, governing the collection, use, retention, and sharing of personal data across all Google services (Search, Gmail, Maps, YouTube, advertising products, etc.), with legal basis grounded in consent, legitimate interest, and contractual necessity under applicable frameworks including GDPR and CCPA. The most significant obligations include Google's collection of a broad range of user data — including search queries, location history, voice and audio activity, browsing history, app usage, device identifiers, and inferred demographic and interest profiles — and its use of this data to personalize advertising across Google and third-party surfaces. Notably, Google retains the right to combine data across all its services and signed-out user data, creating a comprehensive cross-service profiling capability that exceeds the data practices of most single-purpose platforms; the policy also discloses sharing personal data with 'partners' and advertisers in ways that may not be immediately apparent to average users. The policy engages GDPR (Articles 6, 9, 17, 20), CCPA/CPRA (§1798.100 et seq.), COPPA (16 CFR Part 312), and the EU-U.S. Data Privacy Framework, with the FTC serving as primary U.S. enforcement authority; material compliance considerations include the breadth of sensitive data categories processed, the adequacy of consent mechanisms for minors, and the sufficiency of data transfer safeguards for EU/EEA users.

Evidence Provenance
Captured April 19, 2026 06:03 UTC
Document ID CA-D-000015
Version ID CA-V-000627
Wayback Machine View archived versions →
SHA-256 c218a556b60a30e05b8cb088bb0e79633b2f12d03691d7541d3f8d5cdafcb5a2
✓ Snapshot stored ✓ Text extracted ✓ Change verified ✓ Cryptographically signed
Institutional Analysis

🔒 Institutional analysis locked

Regulatory exposure by statute, material risk assessment, vendor due diligence action items, and enforcement precedent. Available on Professional.

Upgrade to Professional — $149/mo
Change Timeline
View full version history (0 captures) →
Analyzed Changes

2 changes analyzed since monitoring began.

What changed Google updated their Google Privacy Policy on April 19, 2026. Change detected: 65 sentence(s) added, 1 sentence(s) modified. Document contained 362 sentences after update.
Consumer impact Google's updated policy now explicitly tells U.S. consumers — especially California residents — that it does not sell their personal information and does not 'share' it as defined under the CCPA, providing stronger transparency about data practices. The new section also maps out exactly where in the policy to find information about data collection, use, disclosure, and retention, making it easier for consumers to understand their rights. You can submit a request to Google to learn what personal information it has collected, used, or disclosed about you, as guaranteed under applicable U.S. state privacy laws.
Why it matters This change gives California and other U.S. state residents explicit, policy-level confirmation that Google does not sell or share their personal data under state privacy law definitions, reducing ambiguity about their data rights. It also makes it easier for consumers to find and exercise their rights by mapping the policy's key sections.
What changed Google updated their Google Privacy Policy on April 18, 2026. Change detected: 1 sentence(s) removed, 9 sentence(s) modified. Document contained 297 sentences after update.
Consumer impact Google has updated its policy to state more definitively that third-party sites and apps share your data with Google even when you use Incognito mode — previously the policy said they 'may' share, now it says they 'still' share. The scope of cross-site tracking has also been broadened from 'Google Analytics' specifically to any 'ad or analytics services,' meaning more of Google's tools are now explicitly covered by these data-linking practices. You can visit your Google Account's Privacy Checkup and review your Web & App Activity controls to limit how this data is saved and used.
Why it matters Google has formally broadened the described scope of its cross-site tracking and confirmed — not just suggested — that Incognito mode does not protect users from data sharing with Google. This means users have less technical and policy-based protection from cross-site tracking than the prior language implied.

Recent Clause-Level Changes Apr 19, 2026

8 provisions unchanged.

View full change record →
High Severity — 5 provisions
Medium Severity — 3 provisions

Cross-platform context

See how other platforms handle Children and Minors Data Protections and similar clauses.

Compare across platforms →

Applicable Regulations

EU AI Act
European Union
BIPA
Illinois, USA
CCPA/CPRA
California, USA
COPPA
United States Federal
CFAA
United States Federal
CAN-SPAM
United States Federal
DMA
European Union
DMCA
United States Federal
DSA
European Union
FCRA
United States Federal
GDPR
European Union
GLBA
United States Federal
HIPAA
United States Federal
TCPA
United States Federal
UK GDPR
United Kingdom

Related Analysis

Privacy · April 16, 2026
What Google Actually Knows About You

Google's Privacy Policy covers Search, Gmail, YouTube, Maps, and every site running Google Analytics. Here is what it actually authorizes.