Google combines data from across all its services — including YouTube watch history, Search queries, Maps usage, and Gmail — to build a profile used to show you personalized ads on YouTube, Google Search, and third-party sites.
This analysis describes what YouTube Ads's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
This cross-service data combination means the ads you see on YouTube are informed by activity far beyond YouTube itself, including your location history, search behavior, and app activity across your devices.
Interpretive note: The precise scope of data combination and the legal bases asserted for each combination vary by jurisdiction and are not fully enumerated in the consumer-facing policy text.
The updated policy makes several material clarifications about how Google links your activity across websites and apps. It shifts from describing analytics tools in isolation to framing them as part …
Your YouTube ad experience is shaped by a behavioral profile drawing on data from multiple Google products and partner signals; limiting this requires actively managing controls across several settings, not just YouTube alone.
How other platforms handle this
We may link or combine information that we collect about you (such as linking your travel booking to your AAdvantage® account, or adding saved AAdvantage® account information to your booking). This may include information that we collect offline (such as in-person airport interactions), information ...
Perplexity may collect and use aggregated and de-identified data derived from Customer's and Authorized Users' use of the Service for purposes of improving, developing, and enhancing the Service and Perplexity's AI models, provided that such data does not identify Customer or any individual user.
If you access or use any of Oura's location-based services, such as by enabling GPS-based activity tracking through our Services, Oura may process the approximate or precise location of your device while the service is active. This data may be obtained via your device's service provider network ID, ...
Monitoring
YouTube Ads has changed this document before.
Receive same-day alerts, structured change summaries, and monitoring for up to 10 platforms.
"We use the information we collect to customize our services for you, including providing recommendations, personalized content, and customized search results. We also use the information we collect to show you ads, including across the web and in apps. We combine this information across Google services and devices you use.— Excerpt from YouTube Ads's Google Privacy Policy
REGULATORY LANDSCAPE: This provision engages GDPR Articles 5, 6, and 9 regarding lawful basis and purpose limitation for cross-context data combination, as well as CCPA/CPRA provisions on sharing personal information for cross-context behavioral advertising. The relevant enforcement authorities are EU Data Protection Authorities (including the Irish DPC as Google's lead supervisory authority), the UK ICO, and US State Attorneys General. The assertion of legitimate interests as a basis for combining data across services may require evaluation under GDPR balancing tests. GOVERNANCE EXPOSURE: High. Cross-service data combination for advertising is the core mechanism enabling Google's advertising business and has been the subject of significant regulatory scrutiny in Europe. The breadth of data sources combined — including location, search, video, and inferred interests — creates material exposure under purpose limitation and data minimization principles. JURISDICTION FLAGS: EU/EEA and UK users have the most significant exposure given GDPR and UK GDPR purpose limitation requirements. California users may have CPRA opt-out rights regarding cross-context behavioral advertising. Users in jurisdictions with emerging comprehensive privacy laws (Virginia, Colorado, Connecticut) may also have relevant opt-out rights. CONTRACT AND VENDOR IMPLICATIONS: Organizations using Google Ads or YouTube Ads products and passing user data to Google through pixels, tags, or APIs should assess whether they are acting as joint controllers or data processors under GDPR, and whether their own privacy disclosures adequately describe this data flow to their users. COMPLIANCE CONSIDERATIONS: Compliance teams should review whether consent mechanisms presented to users — particularly for cookie-based tracking on partner sites — satisfy GDPR consent standards. Data mapping exercises should account for Google as a downstream recipient of user data. Organizations in the EEA should confirm that Google's data transfer mechanisms (Standard Contractual Clauses or equivalent) are current.
Full compliance analysis
Regulatory citations, enforcement risk, and due diligence action items.
Free: track 1 platform + weekly digest. Watcher: 10 platforms + same-day alerts. No credit card required.
We read the privacy policies and terms of service of 38 AI platforms. Here is what they say about training, retention, arbitration, and liability.
Professional Governance Intelligence
Need to monitor specific governance provisions?
Professional includes provision-level monitoring, governance timelines, regulatory mapping, and audit-ready analysis.
Built from archived source documents, structured governance mappings, and historical version tracking.
This cross-service data combination means the ads you see on YouTube are informed by activity far beyond YouTube itself, including your location history, search behavior, and app activity across your devices.
Your YouTube ad experience is shaped by a behavioral profile drawing on data from multiple Google products and partner signals; limiting this requires actively managing controls across several settings, not just YouTube alone.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by YouTube Ads.