Get the weekly research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean. No account.
The policy states that Google collects and stores data from users who are not signed in to a Google Account, linking this data to unique identifiers tied to the user's browser, application, or device, and uses this data for preference maintenance and ad relevance.
This analysis describes what YouTube Ads's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
This provision establishes that Google's data collection applies to signed-out and unregistered users through device and browser-level identifiers, not only to users with Google Accounts. This collection is relevant to cookie consent frameworks, ePrivacy obligations in the EU, and the scope of U.S. state privacy law coverage for non-account holders.
The updated policy makes several material clarifications about how Google links your activity across websites and apps. It shifts from describing analytics tools in isolation to framing them as part of a broader 'ad and analytics services' ecosystem, and broadens the scope of data linking to explicitly include 'cookies and other technologies'. The policy also clarifies that data sharing occurs even in private browsing modes. Review your Google Account activity controls to understand what data is being collected and linked across services you use.
View change record →Under this clause, users who do not have a Google Account or are not signed in are still subject to data collection tied to unique identifiers on their browser or device, which the policy states is used for ad relevance and preference maintenance. Browser cookie settings can be used to limit some of this collection, as described in the policy.
Cross-platform context
See how other platforms handle Data Collection from Signed-Out and Unaccounted Users via Unique Identifiers and similar clauses.
Compare across platforms →Monitoring
YouTube Ads has changed this document before.
Receive same-day alerts, structured change summaries, and monitoring for up to 25 platforms.
"Google also collects and uses data that is not associated with your account. For example, when you're not signed in to a Google Account, we store the information we collect with unique identifiers tied to the browser, application, or device you're using. This allows us to do things like maintain your preferences across browsing sessions, such as your preferred language or whether to show you more relevant search results or ads based on your activity.Excerpt from YouTube Ads's Google Privacy Policy
1. REGULATORY LANDSCAPE: This provision implicates the EU ePrivacy Directive and GDPR requirements for prior informed consent before placing non-essential cookies or similar tracking technologies, enforced by EU data protection authorities. In the United States, it engages FTC guidance on tracking and the applicability of U.S. state privacy laws to data collected from non-account holders through device identifiers. 2. GOVERNANCE EXPOSURE: Medium. Collection from signed-out users through unique identifiers is a common practice but requires robust consent mechanisms in the EU and clear disclosure in the United States. The provision's breadth, covering browser, application, and device identifiers, means the collection surface is substantial even for non-Google-account users. 3. JURISDICTION FLAGS: EU/EEA users require cookie consent under ePrivacy and GDPR before non-essential tracking technologies are deployed. California residents may have CCPA rights regarding data collected through device identifiers even without a Google Account. The policy's statement that this collection occurs for ad relevance purposes for signed-out users is relevant to targeted advertising opt-out rights under U.S. state laws. 4. CONTRACT AND VENDOR IMPLICATIONS: Organizations that deploy Google services on their websites and apps should assess whether their consent management platforms capture the signed-out user tracking described in this provision, and whether their privacy notices adequately disclose this data flow to their users. 5. COMPLIANCE CONSIDERATIONS: Compliance teams should assess whether consent mechanisms for signed-out users satisfy ePrivacy and GDPR requirements in EU deployments. Data mapping should include signed-out user data collected through Google services, and privacy notices should reflect the collection described in this provision for non-account-holder users.
Full institutional analysis
Regulatory citations, enforcement risk, and due diligence action items.
Monitor: same-day alerts on the platforms you choose. Analyst: full institutional analysis.
Compliance Governance Intelligence
Need to monitor specific governance provisions?
Compliance includes provision-level monitoring, governance timelines, regulatory mapping, and audit-ready analysis.
Built from archived source documents, structured governance mappings, and historical version tracking.
This provision establishes that Google's data collection applies to signed-out and unregistered users through device and browser-level identifiers, not only to users with Google Accounts. This collection is relevant to cookie consent frameworks, ePrivacy obligations in the EU, and the scope of U.S. state privacy law coverage for non-account holders.
Under this clause, users who do not have a Google Account or are not signed in are still subject to data collection tied to unique identifiers on their browser or device, which the policy states is used for ad relevance and preference maintenance. Browser cookie settings can be used to limit some of this collection, as described in the policy.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by YouTube Ads.