Skip to content

Privacy Policy

Google updated its Privacy Policy to say more clearly that it tracks signed-out users across devices, and significantly rewrote the sections on sharing your data with governments and law enforcement. Most notably, it removed language promising that its legal team reviews every government data request and pushes back on overly broad ones, replacing it with a generic link, and it added new, broader justifications for proactively disclosing user data to law enforcement.

Signed-out tracking now explicitly spans multiple devicesGoogle clarified that even when you're not logged in, it uses tracking identifiers to…

Google clarified that even when you're not logged in, it uses tracking identifiers to tailor search results and ads based on your activity across all your devices, not just within a single browser session. This means more of your behavior can be linked together even without an account.

“show you more relevant search results or ads based on your activity across devices”

What you can do — Review and adjust your activity controls and ad settings at myactivity.google.com, and consider using private browsing or signing out consistently if you want to limit cross-device tracking.

DATA COLLECTION
Dropped promise that every government data request gets careful legal reviewGoogle removed the specific commitment that its legal team reviews every government or…

Google removed the specific commitment that its legal team reviews every government or court request for your data and pushes back on overly broad ones. It now just points you to a general policy page, which is less reassuring about how closely each request is scrutinized before your data is handed over.

“Our legal team reviews each and every request, regardless of type, and we frequently push back when a request appears to be overly broad or doesn't follow the correct process.”
DATA SHARING
Broader, less-reviewed sharing of data with law enforcementPreviously, Google described disclosing data to governments only in response to formal…

Previously, Google described disclosing data to governments only in response to formal legal process, after carefully reviewing each request. The new wording says Google will disclose 'limited data' to law enforcement 'whenever appropriate' to prevent, detect, or investigate crimes — a broader, more proactive standard that no longer mentions the careful per-request review.

“disclosing limited data to law enforcement authorities whenever appropriate for the purpose of preventing, detecting or investigating crimes”
DATA SHARING
New exception to share data to prevent an imminent threat to lifeGoogle added a new rule letting it give your data to law enforcement if it believes in…

Google added a new rule letting it give your data to law enforcement if it believes in good faith this could prevent an imminent threat to someone's life. This is a fairly standard safety exception but is new in this policy and gives Google discretion to share data without your consent or a court order.

“disclosing data to law enforcement authorities where we have a good faith belief that it is necessary and appropriate for the purpose of preventing an imminent threat to life and the disclosure complies with applicable law”
DATA SHARING
Explicit new category for sharing data with regulators and courtsGoogle added language formally listing disclosure of your data to government authorities,…

Google added language formally listing disclosure of your data to government authorities, regulators, and courts as part of meeting its 'legal obligations,' alongside existing examples like financial record-keeping and age checks.

“disclosing certain data in response to legal requests from government authorities, regulators and courts in compliance with applicable law”
DATA SHARING
20261002_rev01 → 20261012_rev01COLOUR MARKS THE SEVERITY OF A FLAGGED CLAUSE · + AND − MARK ADDED AND REMOVED
11## Information Google collects
22
33## We want you to understand the types of information we collect as you use our services
44
55We collect information to provide better services to all our users - from figuring out basic stuff like which language you speak, to more complex things like which [ads you'll find most useful](https://policies.google.com/privacy), [the people who matter most to you online](https://policies.google.com/privacy), or which YouTube videos you might like. The information Google collects, and how that information is used, depends on how you use our services and how you manage your privacy controls.
66
7When you're not signed in to a Google Account, we store the information we collect with [unique identifiers](https://policies.google.com/privacy) tied to the browser, application, or [device](https://policies.google.com/privacy) you're using. This allows us to do things like maintain your preferences across browsing sessions, such as your preferred language or whether to show you more relevant search results or ads based on your activity.
± CHANGEDSigned-out tracking now explicitly covers cross-device activity

Google added a new lead-in sentence saying it collects and uses data not tied to your account, and changed the description of signed-out tracking to say it can show you more relevant results or ads based on your activity across devices, not just within one browsing session.

7Google also collects and uses data that is not associated with your account. For example, when you're not signed in to a Google Account, we store the information we collect with [unique identifiers](https://policies.google.com/privacy) tied to the browser, application, or [device](https://policies.google.com/privacy) you're using. This allows us to do things like maintain your preferences across browsing sessions, such as your preferred language or whether to show you more relevant search results or ads based on your activity across devices.
88
99When you're signed in, we also collect information that we store with your Google Account, which we treat as [personal information](https://policies.google.com/privacy).
1010
1111## Things you create or provide to us
1212
1313When you create a Google Account, you provide us with [personal information](https://policies.google.com/privacy) that includes your name and a password. You can also choose to add a [phone number](https://policies.google.com/privacy) or [payment information](https://policies.google.com/privacy) to your account. Even if you aren't signed in to a Google Account, you might choose to provide us with information - like an email address to communicate with Google or receive updates about our services.
411411- We process information about requests to remove content from our services under Google's content removal policies or applicable law to assess the request, and to ensure transparency, improve accountability and prevent abuse and fraud in these practices.
412412
413413**To meet any applicable law, regulation, legal process or enforceable governmental request.**
414414
415415Examples of processing activities:
416416
417- Like other technology and communications companies, Google regularly receives requests from governments and courts around the world to disclose user data. Respect for the privacy and security of data you store with Google underpins our approach to complying with these legal requests. Our legal team reviews each and every request, regardless of type, and we frequently push back when a request appears to be overly broad or doesn't follow the correct process.
± CHANGEDRemoved promise of careful review of every government data request

Google deleted the sentence stating its legal team reviews every government/court request for user data and often pushes back on overly broad ones. It now just links to a general policy page instead of describing this specific safeguard.

417- Like other technology and communications companies, Google regularly receives requests from governments and courts around the world to disclose user data. Respect for the privacy and security of data you store with Google underpins our approach to complying with these legal requests. For more information about how Google responds to such requests, see our [data disclosure policies](https://policies.google.com/terms/information-requests).
418418- Certain laws require us to share information with regulators and third parties, such as researchers and authorized out-of-court dispute bodies.
419419- Legal obligations sometimes require us to retain certain information for purposes like financial record-keeping, such as information about a payment you've made to Google for tax or accounting purposes.
420420- Various laws and regulations require us to put in place measures to confirm that our users are old enough to use our services. To help determine your age, we process the date of birth you provide. We also process information about your activity in our services, both when you're signed in to a Google Account or signed out, and use machine learning technology to determine if you are likely over 18. In certain cases, if we cannot confirm that you are old enough to use our services by other means, we can request other information to verify your age, like your government ID, credit card, a photo of you, or your phone number.
421421
422422 |
423423
437437
438438The legal grounds for processing this information will depend on how you use Google services and your settings but could include the following:
439439
440440- When necessary for our **legitimate interests** and those of third parties, including to:
441441 - **Enforce legal claims, including investigation of potential violations of applicable Terms of Service.** For example, analyzing content to help us detect abuse such as spam, malware, and illegal content.
442442 - **Detect, prevent, or otherwise address fraud, abuse, security, or technical issues with our services.** For example, collecting and analyzing IP addresses and cookie data to protect against automated abuse.
443 - **Protect against harm to the rights, property or safety of Google, our users, or the public, including disclosing information to government authorities.** For example, responding to legal process or enforceable requests from governments and courts to disclose data, after carefully reviewing each request to make sure it satisfies applicable laws.
443 - Protect against harm to the rights, property or safety of Google, our users, or the public, including disclosing information to government authorities. For example, disclosing limited data to law enforcement authorities whenever appropriate for the purpose of preventing, detecting or investigating crimes.
± CHANGEDBroader stated basis for disclosing data to law enforcement

The example under 'protecting rights, property, or safety' used to describe disclosure only as a response to legal process after careful review. It now describes Google disclosing 'limited data' to law enforcement 'whenever appropriate' for preventing, detecting, or investigating crimes, dropping the 'carefully reviewing each request' language.

444444 - **Perform research that improves our services for our users and benefits the public.** For example, processing information about [requests to remove content](https://support.google.com/legal/answer/3110420) from our services to educate the public, facilitate research, and provide transparency about these requests.
445- When necessary to protect the **vital interests** of you or another person. For example, processing data to detect and combat online child sexual abuse.
446- When we have a **legal obligation** to do so, such as retaining certain information for purposes like financial record-keeping, or processing and retaining information to help ensure that users are old enough to use our services.
445- When necessary to protect the vital interests of you or another person. For example, processing data to detect and combat online child sexual abuse or disclosing data to law enforcement authorities where we have a good faith belief that it is necessary and appropriate for the purpose of preventing an imminent threat to life and the disclosure complies with applicable law.
+ ADDEDNew carve-out for disclosing data to prevent imminent threats to life

Google added a new example under 'vital interests' allowing disclosure of data to law enforcement based on a good-faith belief it's necessary to prevent an imminent threat to life, as long as it complies with applicable law.

446- When we have a legal obligation to do so, such as retaining certain information for purposes like financial record-keeping, processing and retaining information to help ensure that users are old enough to use our services or disclosing certain data in response to legal requests from government authorities, regulators and courts in compliance with applicable law.
+ ADDEDNew legal-obligation basis covering disclosure to regulators and courts

Google added language under 'legal obligation' explicitly listing disclosure of data to government authorities, regulators, and courts in compliance with applicable law, in addition to the existing examples about financial record-keeping and age verification.

447447
448448 |
449449
450450### Linking your Google services
451451
452452If you're a user in the EU, we offer you the choice to keep certain Google services linked. You can learn more about your linked services and how to manage your choices at [About DMA & Your Linked Services](https://support.google.com/accounts/answer/14202510).