8 Total
0 High severity
6 Medium severity
2 Low severity
Summary

This is Google's main Privacy Policy, which covers all Google services including YouTube and the advertising system that shows you ads across the web and on YouTube. The most important thing to know is that Google collects a wide range of data about you — including your search history, YouTube watch history, location, device identifiers, and inferred interests — and uses all of this to build an advertising profile that determines which ads you see, including on YouTube. You can review and adjust your ad personalization settings, manage what data Google saves about you, and exercise data deletion rights at myaccount.google.com.

Technical / Legal Breakdown

This document is Google's Privacy Policy as presented on the policies.google.com domain, governing data collection, processing, and use across Google's full suite of services, including YouTube and YouTube Ads, with Google LLC (or Google Ireland Limited for EEA/UK users) acting as the data controller. The policy states that Google collects information users create or provide (including account registration data, content uploaded, and communications), information generated through service use (including search queries, video watch history, location data, purchase activity, and device identifiers), and information from third-party sources and partners; the terms authorize use of this data to deliver, personalize, and improve services, serve targeted advertising, and conduct measurement and analytics. The advertising data practices described — including cross-service behavioral profiling, use of inferred interests and demographic categories, and data sharing with third-party advertising partners — reflect an expansive data ecosystem that is operationally distinctive in scale, though broadly consistent with the structure of large platform advertising policies; the policy asserts rights to combine data across Google products and partner signals, which may engage regulatory scrutiny in certain jurisdictions. This policy engages GDPR and UK GDPR (for EEA and UK users), CCPA and CPRA (for California residents), COPPA (for services directed to children), and the FTC Act, with Google asserting consent and legitimate interests as dual legal bases for certain processing activities; the EU and UK regulatory exposure is particularly material given ongoing enforcement activity by EU Data Protection Authorities against Google's advertising data practices.

Institutional Analysis

Institutional analysis available with Professional

Regulatory exposure by statute, material risk assessment, vendor due diligence action items, and enforcement precedent. Available on Professional.

Start Professional free trial

2 important changes detected

3 versions captured · Last updated: April 2026

What changed YouTube Ads updated its privacy policy on April 19, 2026 to add clarifications about how Google handles your information and your privacy rights. The new language explains that Google does not sell your personal information and does not "share" it under California law, and it walks through where to find information about data collection, use, retention, and how you can request information about your data. This is largely a transparency and navigation update that makes the policy more accessible rather than a substantive change to Google's data practices.
Why this matters The updated policy clarifies that Google does not sell your personal information and does not "share" your data as defined under California privacy law, which aligns with what Google has stated before but now makes more explicit. The policy also adds navigation to help you locate information about what data Google collects, why it uses your data, when it shares information, how long it retains data, and your rights to request information about your data practices. No material changes to Google's actual data handling practices appear to have occurred; this is primarily a transparency and organization improvement.
View full change record →
What changed YouTube Ads updated its Google Privacy Policy on April 18, 2026, making several changes to how it describes data collection and linking across services. Key changes include clarifying that activity information is managed 'by your activity controls' rather than just 'saved in your account', broadening references from 'Google Analytics' alone to 'ad and analytics services', and shifting language around data sharing in private browsing modes from 'collected' to 'shared'. The policy also expanded language describing how cookies and tracking technologies can link your activity across websites and apps.
Why this matters The updated policy makes several material clarifications about how Google links your activity across websites and apps. It shifts from describing analytics tools in isolation to framing them as part of a broader 'ad and analytics services' ecosystem, and broadens the scope of data linking to explicitly include 'cookies and other technologies'. The policy also clarifies that data sharing occurs even in private browsing modes. Review your Google Account activity controls to understand what data is being collected and linked across services you use.
View full change record →

Medium — 6 provisions
Low — 2 provisions

Monitoring

YouTube Ads has updated this document before.

Watcher includes same-day alerts, structured change summaries, and monitoring for up to 10 platforms.

Start Watcher free trial Or create a free account →

Professional Governance Intelligence

Need provision-level monitoring and regulatory mapping?

Professional includes governance timelines, compliance memos, audit-ready analysis, and full provision tracking.

Start Professional free trial

Cross-platform context

See how other platforms handle Children and Minors Data Protections and similar clauses.

Compare across platforms →

Mapped Governance Frameworks

CCPA/CPRA
California, USA
View official text ↗
COPPA
United States Federal
View official text ↗
Connecticut Data Privacy Act Amendments
US-CT
View official text ↗
FTC Act Section 5
United States Federal
View official text ↗
GDPR
European Union
View official text ↗
Indiana Consumer Data Protection Act
US-IN
View official text ↗
Kentucky Consumer Data Protection Act
US-KY
View official text ↗
Universal Opt-Out Mechanism Expansion 2026
US
View official text ↗
VPPA
United States Federal
View official text ↗
Archival ProvenanceSource & Archival Record
Last Captured April 19, 2026 06:03 UTC
Capture Method Automated scheduled archival capture
Document ID CA-D-000015
Version ID CA-V-001849
SHA-256 c218a556b60a30e05b8cb088bb0e79633b2f12d03691d7541d3f8d5cdafcb5a2
✓ Snapshot stored ✓ Text extracted ✓ Change verified ✓ Hash verified

Governance Monitoring

Monitor governance changes across the platforms you rely on.

Structured alerts for policy changes, governance events, and provision updates across 318+ platforms.

Create free account Compare plans