Google Privacy Policy
Google's privacy policy update reveals two notable shifts: it now explicitly states that Google collects and uses data not tied to your account (including cross-device activity tracking), and it significantly loosens the conditions under which user data can be shared with law enforcement — moving from 'careful review of legal requests' language to broader, more proactive disclosure for crime prevention and investigation purposes.
Google now explicitly tracks and links your activity across multiple devices
Google added language clarifying it collects data not linked to your account and uses your signed-out activity to personalize results 'across devices,' not just on one device. This means more of your behavior across your phone, tablet, and computer can be combined to build a profile of you, even without signing in.
“based on your activity across devices.”
What you can do — Review and adjust your ad personalization and activity controls at myaccount.google.com, and consider browsing signed-out activity in private/incognito mode if you want to limit cross-device tracking.
Google dropped its promise to carefully review every government data request
The policy used to specifically promise that Google's legal team reviews every single government or court request for your data and often pushes back on overly broad ones. That specific commitment has been removed and replaced with a generic link to a policy page, reducing the concrete assurance you had about how your data requests are scrutinized.
“Our legal team reviews each and every request, regardless of type, and we frequently push back when a request appears to be overly broad or doesn't follow the correct process.”
Google can now share your data with law enforcement more broadly, for any crime investigation
Before, Google said it would disclose your data to governments only when legally required, and only after carefully checking that the request followed the law. Now, the policy says Google can disclose 'limited data' to law enforcement 'whenever appropriate' to help prevent, detect, or investigate crimes — a broader standard that no longer emphasizes the same careful legal review before sharing your information.
“disclosing limited data to law enforcement authorities whenever appropriate for the purpose of preventing, detecting or investigating crimes.”
New rule allows emergency data sharing to prevent imminent harm
Google added a new, narrower rule letting it share your data with law enforcement if it genuinely believes doing so could prevent someone from being seriously hurt or killed. This is a safety-focused exception and is more limited in scope than the crime-investigation change above.
“disclosing data to law enforcement authorities where we have a good faith belief that it is necessary and appropriate for the purpose of preventing an imminent threat to life and the disclosure complies with applicable law”
| 1 | 1 | ## Information Google collects |
| 2 | 2 | |
| 3 | 3 | ## We want you to understand the types of information we collect as you use our services |
| 4 | 4 | |
| 5 | 5 | We collect information to provide better services to all our users - from figuring out basic stuff like which language you speak, to more complex things like which [ads you'll find most useful](https://policies.google.com/privacy), [the people who matter most to you online](https://policies.google.com/privacy), or which YouTube videos you might like. The information Google collects, and how that information is used, depends on how you use our services and how you manage your privacy controls. |
| 6 | 6 | |
| 7 | When you're not signed in to a Google Account, we store the information we collect with [unique identifiers](https://policies.google.com/privacy) tied to the browser, application, or [device](https://policies.google.com/privacy) you're using. This allows us to do things like maintain your preferences across browsing sessions, such as your preferred language or whether to show you more relevant search results or ads based on your activity. | |
| 7 | Google also collects and uses data that is not associated with your account. For example, when you're not signed in to a Google Account, we store the information we collect with [unique identifiers](https://policies.google.com/privacy) tied to the browser, application, or [device](https://policies.google.com/privacy) you're using. This allows us to do things like maintain your preferences across browsing sessions, such as your preferred language or whether to show you more relevant search results or ads based on your activity across devices. | |
+ ADDEDNew disclosure about data not linked to your account Google added a new sentence stating it collects and uses data that isn't tied to your Google Account, in addition to the existing explanation about signed-out tracking via device/browser identifiers. ± CHANGEDSigned-out tracking now explicitly described as cross-device The explanation of how Google uses signed-out identifiers to personalize search results and ads was updated to clarify this activity tracking happens across devices, not just within one browser/device session. | ||
| 8 | 8 | |
| 9 | 9 | When you're signed in, we also collect information that we store with your Google Account, which we treat as [personal information](https://policies.google.com/privacy). |
| 10 | 10 | |
| 11 | 11 | ## Things you create or provide to us |
| 12 | 12 | |
| 13 | 13 | When you create a Google Account, you provide us with [personal information](https://policies.google.com/privacy) that includes your name and a password. You can also choose to add a [phone number](https://policies.google.com/privacy) or [payment information](https://policies.google.com/privacy) to your account. Even if you aren't signed in to a Google Account, you might choose to provide us with information - like an email address to communicate with Google or receive updates about our services. |
| 411 | 411 | - We process information about requests to remove content from our services under Google's content removal policies or applicable law to assess the request, and to ensure transparency, improve accountability and prevent abuse and fraud in these practices. |
| 412 | 412 | |
| 413 | 413 | **To meet any applicable law, regulation, legal process or enforceable governmental request.** |
| 414 | 414 | |
| 415 | 415 | Examples of processing activities: |
| 416 | 416 | |
| 417 | - Like other technology and communications companies, Google regularly receives requests from governments and courts around the world to disclose user data. Respect for the privacy and security of data you store with Google underpins our approach to complying with these legal requests. Our legal team reviews each and every request, regardless of type, and we frequently push back when a request appears to be overly broad or doesn't follow the correct process. | |
| 417 | - Like other technology and communications companies, Google regularly receives requests from governments and courts around the world to disclose user data. Respect for the privacy and security of data you store with Google underpins our approach to complying with these legal requests. For more information about how Google responds to such requests, see our [data disclosure policies](https://policies.google.com/terms/information-requests). | |
± CHANGEDRemoved specific commitment about reviewing government data requests Google removed language promising that its legal team reviews every government/court request for user data and 'frequently pushes back' on overly broad requests. It was replaced with a link to a general data disclosure policy page, without repeating that specific commitment. | ||
| 418 | 418 | - Certain laws require us to share information with regulators and third parties, such as researchers and authorized out-of-court dispute bodies. |
| 419 | 419 | - Legal obligations sometimes require us to retain certain information for purposes like financial record-keeping, such as information about a payment you've made to Google for tax or accounting purposes. |
| 420 | 420 | - Various laws and regulations require us to put in place measures to confirm that our users are old enough to use our services. To help determine your age, we process the date of birth you provide. We also process information about your activity in our services, both when you're signed in to a Google Account or signed out, and use machine learning technology to determine if you are likely over 18. In certain cases, if we cannot confirm that you are old enough to use our services by other means, we can request other information to verify your age, like your government ID, credit card, a photo of you, or your phone number. |
| 421 | 421 | |
| 422 | 422 | | |
| 423 | 423 | |
| 437 | 437 | |
| 438 | 438 | The legal grounds for processing this information will depend on how you use Google services and your settings but could include the following: |
| 439 | 439 | |
| 440 | 440 | - When necessary for our **legitimate interests** and those of third parties, including to: |
| 441 | 441 | - **Enforce legal claims, including investigation of potential violations of applicable Terms of Service.** For example, analyzing content to help us detect abuse such as spam, malware, and illegal content. |
| 442 | 442 | - **Detect, prevent, or otherwise address fraud, abuse, security, or technical issues with our services.** For example, collecting and analyzing IP addresses and cookie data to protect against automated abuse. |
| 443 | - **Protect against harm to the rights, property or safety of Google, our users, or the public, including disclosing information to government authorities.** For example, responding to legal process or enforceable requests from governments and courts to disclose data, after carefully reviewing each request to make sure it satisfies applicable laws. | |
| 443 | - Protect against harm to the rights, property or safety of Google, our users, or the public, including disclosing information to government authorities. For example, disclosing limited data to law enforcement authorities whenever appropriate for the purpose of preventing, detecting or investigating crimes. | |
± CHANGEDBroadened grounds for disclosing data to law enforcement Previously, Google said it discloses data to governments only in response to legal process or enforceable requests, after carefully reviewing each request. The new text drops that careful-review language and instead says Google discloses 'limited data' to law enforcement 'whenever appropriate' for preventing, detecting, or investigating crimes — a broader and more proactive standard. ± CHANGEDFormatting: bold removed from some legal-basis headings Some bolded phrases describing legal bases for processing (e.g., 'Protect against harm...', 'vital interests', 'legal obligation') were unbolded. This is a cosmetic/formatting change with no effect on rights. | ||
| 444 | 444 | - **Perform research that improves our services for our users and benefits the public.** For example, processing information about [requests to remove content](https://support.google.com/legal/answer/3110420) from our services to educate the public, facilitate research, and provide transparency about these requests. |
| 445 | - When necessary to protect the **vital interests** of you or another person. For example, processing data to detect and combat online child sexual abuse. | |
| 446 | - When we have a **legal obligation** to do so, such as retaining certain information for purposes like financial record-keeping, or processing and retaining information to help ensure that users are old enough to use our services. | |
| 445 | - When necessary to protect the vital interests of you or another person. For example, processing data to detect and combat online child sexual abuse or disclosing data to law enforcement authorities where we have a good faith belief that it is necessary and appropriate for the purpose of preventing an imminent threat to life and the disclosure complies with applicable law. | |
+ ADDEDNew explicit ground for emergency disclosure to law enforcement Google added language allowing it to disclose data to law enforcement when it has a good-faith belief this is necessary to prevent an imminent threat to someone's life, as long as this complies with applicable law. | ||
| 446 | - When we have a legal obligation to do so, such as retaining certain information for purposes like financial record-keeping, processing and retaining information to help ensure that users are old enough to use our services or disclosing certain data in response to legal requests from government authorities, regulators and courts in compliance with applicable law. | |
+ ADDEDNew explicit mention of disclosing data under legal obligations The 'legal obligation' processing ground now explicitly mentions disclosing data in response to legal requests from government authorities, regulators, and courts, in addition to the previously listed record-keeping and age-verification purposes. | ||
| 447 | 447 | |
| 448 | 448 | | |
| 449 | 449 | |
| 450 | 450 | ### Linking your Google services |
| 451 | 451 | |
| 452 | 452 | If you're a user in the EU, we offer you the choice to keep certain Google services linked. You can learn more about your linked services and how to manage your choices at [About DMA & Your Linked Services](https://support.google.com/accounts/answer/14202510). |