Policy changes require explicit consent to reduce user rights

The updated Privacy Policy now explicitly discloses how Google handles data under U.S. state privacy laws, particularly California's CCPA. Google states that it does not sell personal information and does not share it as that term is defined under the CCPA. The policy details user rights to access information, request deletion, correct information, and opt out of certain profiling and targeted advertising. Users can exercise these rights through tools like My Activity and My Ad Center, or by contacting Google directly. The policy also provides specific handling of health data under Washington's My Health My Data Act and Nevada Senate Bill 370, where Google processes such information only with user consent or as otherwise permitted by law.

The updated policy makes several material clarifications about how Google links your activity across websites and apps. It shifts from describing analytics tools in isolation to framing them as part of a broader 'ad and analytics services' ecosystem, and broadens the scope of data linking to explicitly include 'cookies and other technologies'. The policy also clarifies that data sharing occurs even in private browsing modes. Review your Google Account activity controls to understand what data is being collected and linked across services you use.