1
Inside the black box: a glimpse of Google’s internal data free-for-all.
The GDPR “purpose limitation principle”requires that
personal data is “collected for specified, explicit and
legitimate purposes and not further processed in a manner
that is incompatible with those purposes”.
1
This is at odds
with the data free-for-all shown here.
Sources:
All quotations in the table are directly from Google’s own
documents for business clients, technology partners,
developers, lawmakers, and users. Almost 100 documents
are cited.
Note:
This table is not a complete list of Google purposes, or of
the details of each purpose. Some may duplicate others.
Many more are so ill-defined by Google that they conflate
multiple purposes.
Category
Purported processing purpose
Other discoverable processing purpos es
Data collected
Data shared externally
Explanation and examples
Accounting
“purposes such as accoun ting...”2
“…such as…”3is vague language that may conflate
or omit many di stinct processing purposes.
“For example, when you pu rchase apps from the Play
Store or products from the Google Store.”4
Accounting (related to
dispute resolution)
“purposes such as ... d ispute resolution ...”5
“…such as…”6is vague language that may conflate
or omit many di stinct processing purposes.
“For example, when you purchase apps from the Play
Store or products from the Google Store.”7
Accounting (related to tax
compliance)
“purposes such as... compliance with tax ...”8
“…such as…”9is vague language that may conflate
or omit many di stinct processing purposes.
“For example, when you pu rchase apps from the Play
Store or products from the Google Store.”10
Accounting (related to
escheatment)
“purposes such as ... e scheatment ...”11
“…such as…”12 is vague language that may conflate
or omit many di stinct processing purposes.
“For example, when you pu rchase apps from the Play
Store or products from the Google Store.”13
Accounting (related to a nti-
money laundering)
“purposes such as ... anti-money laun dering
…”14
“…such as…”15 is vague language that may conflate
or omit many di stinct processing purposes.
“For example, when you pu rchase apps from the Play
Store or products from the Google Store.”16
Accounting (unknown)
“purposes such ... other fina ncial
regulations.”17
“…such as…”18 is vague language that may conflate
or omit many di stinct processing purposes.
“For example, when you pu rchase apps from the Play
Store or products from the Google Store.”19
Advertising (related to
targeting)
“To serve ads in services where cookie
technology may not be availab le (for
example, in mobile applications)”20
This vague language may confla te or omit many
distinct processing purposes.
“Advertising identifiers for mobile apps … We may use
technologies that perform similar function s to cookies”21
Advertising (related to
targeting)
“to coordinate ads a crossyour mob ile apps
and mobile browser”22
“Advertising identifiers for mobile apps … Sometimes Google
links the identifier u sed for advertising on mobile
applications to an advertising cookie on the same device”23
Advertising (related to
targeting)
“Google Ad Manager collects da ta to provide the
relevant services, including: ... To apply publisher
configurations and rules, such as p rotections,
blocks and minimum prices; …”24
“Depending on the publisher’s settings, the user’s
preferences and the device in question, the collected
data may include:
The request itself, such as the browser’s request for an
ad to be served on a non-Google website and the a d
slot to be filled; System and d evice information, such
as the device, browser version, operating sy stem
version, default language and screen size; IP address;
Location; Th e datean d timeo f the request; In the
case of web browsers, the full URL of the page being
visited together with the referrer URL; In the case of
mobile devices, mobile network information; In the
case of mobile a pplications,an id entifier for the
application and a resettable mobile advertising
identifier (such as IDFA fo r iOS or AdID for Android); In
the case of web browsers, any cookie IDs that Google
has previously set on the user’s device; and Event
data such as impression, click, or co nversion data.
Google Ad Manager may also collect such data
through tags on the publisher’s property or the Google
Mobile Ads software development k it (SDK) on the
user’s app.
It can also collect publisher-provided IDs. In addition,
Google Ad Manager allow s publishers to integrate
audience data, such a s audience lists and lists of
cookie IDs with inferred interests, from their o wn data
management platform.”25
Advertising (related to
targeting)
“Best times of day to target a campaign”26
2
Category
Purported processing purpose
Other discoverable processing purpos es
Data collected
Data shared externally
Explanation and examples
Advertising (related to
targeting)
“to link your activity across devices if you’ve
previously signed in to your Google Account
on another device. We do this to coordinate
the ads you see across d evices ...”27
“We also use cookies named ‘AID,’ ‘DSID,’ and
‘TAID’”28
Advertising (related to
targeting)
“Google Ad Manager collects da ta to provide the
relevant services, including: ... To forecast
available traffic (e.g., the number of potential ad
impressions available to an ad campaign targeted
to a specific country or device type); …”29
“Depending on the publisher’s settings, the user’s
preferences and the device in question, the collected
data may include:
The request itself, such as the browser’s request for an
ad to be served on a non-Google website and the a d
slot to be filled; System and d evice information, such
as the device, browser version, operating sy stem
version, default language and screen size ; IP address;
Location; Th e datean d timeo f the request; In the
case of web browsers, the full URL of the page being
visited together with the referrer URL; In the case of
mobile devices, mobile network information; In the
case of mobile a pplications,an id entifier for the
application and a resettable mobile advertising
identifier (such as IDFA fo r iOS or AdID for Android); In
the case of web browsers, any cookie IDs that Google
has previously set on the user’s device; and Event
data such as impression, click, o r conversion data.
Google Ad Manager may also collect such data
through tags on the publisher’s property or the Google
Mobile Ads software development k it (SDK) on the
user’s app.
It can also collect publisher-provided IDs. In addition,
Google Ad Manager allo ws publishers to integrate
audience data, such a s audience lists and lists of
cookie IDs with inferred interests, from their o wn data
management platform.”30
Advertising (related to
targeting)
“Google Ad Manager collects da ta to provide the
relevant services, including: ... To enable
frequency capping (i.e., to ensure that u sers are
not served the same ad multiple times); ….”31
“Depending on the publisher’s settings, the user’s
preferences and the device in question, the collected
data may include:
The request itself, such as the browser’s request for an
ad to be served on a non-Google website and the a d
slot to be filled; System and d evice information, such
as the device, browser version, operating sy stem
version, default language and screen size; IP ad dress;
Location; Th e datean d timeo f the request; In the
case of web browsers, the full URL of the page being
visited together with the referrer URL; In the case of
mobile devices, mobile network information; In the
case of mobile applications, an iden tifier for the
application and a resettable mobile advertising
identifier (such as IDFA fo r iOS or AdID for Android); In
the case of web browsers, any cookie IDs that Google
has previously set on the user’s device; and Event
data such as impression, click, or co nversion data.
Google Ad Manager may also collect such data
through tags on the publisher’s property or the Google
Mobile Ads software development k it (SDK) on the
user’s app.
It can also collect publisher-provided IDs. In addition,
Google Ad Manager allow s publishers to integrate
audience data, such a s audience lists and lists of
cookie IDs with inferred interests, from their o wn data
management platform.”32
Advertising (related to
targeting)
“Google Ad Manager collects data to provide the
relevant services, including: ... To maximize
publisher yield through optimizations …”33
“Depending on the publisher’s settings, the user’s
preferences and the device in question, the collected
data may include:
The request itself, such as the browser’s request for an
ad to be served on a non-Google website and the a d
slot to be filled; System and d evice information, such
as the device, browser version, operating sy stem
3
Category
Purported processing purpose
Other discoverable processing purpos es
Data collected
Data shared externally
Explanation and examples
version, default language and screen size ; IP address;
Location; Th e datean d timeo f the request; In the
case of web browsers, the full URL of the page being
visited together with the referrer URL; In the case of
mobile devices, mobile network information; In the
case of mobile a pplications,an id entifier for the
application and a resettable mobile advertising
identifier (such as IDFA fo r iOS or AdID for Android); In
the case of web browsers, any cookie IDs that Google
has previously set on the user’s device; and Event
data such as impression, click, o r conversion data.
Google Ad Manager may also collect such data
through tags on the publisher’s property or the Google
Mobile Ads software development k it (SDK) on the
user’s app.
It can also collect publisher-provided IDs. In addition,
Google Ad Manager allo ws publishers to integrate
audience data, such a s audience lists and lists of
cookie IDs with inferred interests, from their o wn data
management platform.”
Advertising (related to
targeting)
“Google Ad Manager collects da ta to provide the
relevant services, including: ... To maximize
publisher yield through ... real time bidding; …”34
“Depending on the publisher’s settings, the user’s
preferences and the device in question, the collected
data may include:
The request itself, such as the browser’s request for an
ad to be served on a non-Google website and the a d
slot to be filled; System and d evice information, such
as the device, browser version, operating sy stem
version, default language and screen size ; IP address;
Location; Th e datea nd time of the request; In the
case of web browsers, the full URL of the page being
visited together with the referrer URL; In the case of
mobile devices, mobile network information; In the
case of mobile a pplications,an id entifier for the
application and a resettable mobile advertising
identifier (such as IDFA fo r iOS or AdID for Android); In
the case of web browsers, any cookie IDs that Google
has previously set on the user’s device; and Event
data such as impression, click, or co nversion data.
Google Ad Manager may also collect such data
through tags on the publisher’s property or the Google
Mobile Ads software development k it (SDK) on the
user’s app.
It can also collect publisher-provided IDs. In addition,
Google Ad Manager allow s publishers to integrate
audience data, such a s audience lists and lists of
cookie IDs with inferred interests, from their o wn data
management platform.”35
Advertising (related to
targeting)
“Google Ad Manager collects da ta to provide the
relevant services, including: ... To enable
sequential creative rotation (i.e., to show a set of
ads to users in a specific sequence); …”36
“Depending on the publisher’s settings, the user’s
preferences and the device in question, the collected
data may include:
The request itself, such as the browser’s request for an
ad to be served on a non-Google website and the a d
slot to be filled; System and d evice information, such
as the device, browser version, operating sy stem
version, default language and screen size ; IP address;
Location; Th e datean d timeo f the request; In the
case of web browsers, the full URL of the page being
visited together with the referrer URL; In the case of
mobile devices, mobile network information; In the
case of mobile a pplications, an identifier for the
application and a resettable mobile advertising
identifier (such as IDFA fo r iOS or AdID for Android); In
the case of web browsers, any cookie IDs that Google
has previously set on the user’s device; and Event
data such as impression, click , or conversion data.
4
Category
Purported processing purpose
Other discoverable processing purpos es
Data collected
Data shared externally
Explanation and examples
Google Ad Manager may also collect such data
through tags on the publisher’s property or the Google
Mobile Ads software development k it (SDK) on the
user’s app.
It can also collect publisher-provided IDs. In addition,
Google Ad Manager allow s publishers to integrate
audience data, such a s audience lists and lists of
cookie IDs with inferred interests, from their o wn data
management platform.”37
Advertising (related to
targeting)
“Real-time bidding”38 covers a multitude of
purposes, and since the information sharin g
involved is boundless, the range of purposes that
may result from it is bo undless too.
“id…, google_user_id…, hosted_match_data…,
user_agent…., geo_criteria_id…, postal_vode…,
encrypted_hyper_local_set, hyperlocal_set…,
user_vertical…, user_list…, url…, detected_vertical…,
latitude, longitude, … hyperlocal, center_point, … userlist id,
userlist age_seconds, … vertical object id, vertical object
weight, … device os_version, device carrier_id, device
screen_width, device screen_height, device
screen_pixel_ratio_millis, device_platform, device_brand,
device_model, device hardware_version, OsVersion majo r
minor micro, …encrypted_advertising_id,
encrypted_hashed_idfa, advertising_id, hashed_idfa, …
installedSdk id, Version major minor micro, …
consented_providers”39
Google’s sharing on
personal data appears to be
boundless. Data are
broadcast to 833 “ad
technology providers”40 and
may also be broadcast to
2,033 “certified”41 Google
partners. There is no con trol
over how the data are then
processed by these
companies, aside from
Google’request to be
notified if its contractual
provisions are breached.42
Advertising (related to
measurement)
“Google uses the information shared by sites
and apps to ... , measure the ef fectiveness of
advertising”43
This vague language may confla te or omit many
distinct processing purposes.
“For example, when you visit a we bsite that uses advertising
services like AdSense, includi ng analytics tools like Google
Analytics, or embeds video co ntent from YouTube, your web
browser automatically sends certain information to Google.
This includes the URL of the page you’re visiting and your IP
address. We may also set coo kies on your browser or read
cookies that are already there. Ap ps that use Google
advertising services also share information with Google,
such as the name of the app and a unique id entifierfo r
advertising.”44
Advertising (unknown)
“Providing advertising, which keeps many o f
our services free (and wh en ads are
personalized, we ask fo r your consent)”45
This language is exceptionall y broad and vague,
and may conflate or omit man y distinct processing
purposes.
Advertising (related to
measurement)
“so we can provide aggregated reports to
advertisers,”47
“we collect information about views a nd interactions with
ads. … We may also measure other interactions, such as how
you move your mouse over an a d or if you interact with the
page on which the ad appears.”48
Advertising (unknown
purposes related to
advertising and
measurement)
“...for advertising and ad measurement
purposes...”49
This vague language may confla te or omit many
distinct processing purposes.
“Specific partners, listed below, can co llect or receive non-
personally identifiable information abou t your browser or
device when you use Google sites and apps. These partners
collect this information for advertising and ad measurement
purposes, using their own c ookies or similar technologies.
For example, we allow Y ouTube creators and advertisers to
work with measurement companies to learn about the
audience of their Y ouTube videos or ads, using cookies o r
similar technologies.
You can learn more about how these specific partners
collect and use you r information: Nielsen,comScore, Integral
Ad Science, DoubleVerify, Oracle Data Cloud, Ka ntar,R N SSI
Group”50
“For example, advertisers may up load data from their
loyalty-card programs so that they can better understand
the performance of their ad campaigns.”51
“For example, we allow Yo uTube creators and
advertisers to work with measurement companies to
learn about the audience of their YouTube videos or
ads, using cookies o r similar technologies. … Another
example is merchants on ou r shopping pages who use
cookies to understand how man y different people see
their product listings.”52
Advertising (related to
measurement)
“helps us improve the reports we gi ve to our
advertisers on the effe ctivenesso f their
campaigns.”53
“Advertising identifiers for mobile apps … Sometimes Google
links the identifier u sed for advertising on mobile
applications to an advertising cookie on the same device”54
5
Category
Purported processing purpose
Other discoverable processing purpos es
Data collected
Data shared externally
Explanation and examples
Advertising (related to
measurement)
“Advertising. … to make advertising more
engaging to users and more valuable to
publishers and advertisers. Some common
applications of cookies are ... to improve
reporting on campaign performance...”55
“...Some common applications are…”56 suggests
the existence of other purposes that are not
specified. This vague language may conflate or
omit many distinct processing purposes.
Advertising (related to
measurement)
“purposes such as measuring in teractions
with the ads on that domain ...”57
“...such as…”58 is vague language that may
conflate or omit many distinct p rocessing
purposes.
“Sometimes advertising cookies may b e set on the
domain of the site you’re visiting. In the case of
advertising we serve across the web, cookies (e.g.,
cookies named ‘__gads’ or ‘__gac’) may be set on the
domain of the site you’re visiting. Unlike cookies that
are set on Google’s own domains, these cookies can’t
be read by Google when you’re on a site other than
the one on which they were set.”59
Advertising (related to
measurement)
“‘session state cookies’ … to anonymously
measure the effectiveness of PPC ( pay per
click) and affiliate advertising.”60
“For example, we use a cookie called
‘recently_watched_video_id_list’ so that YouTube can
record the videos most recently watched by a
particular browser.”61
Advertising (related to
measurement)
“... to measure interactions with the a ds we
show.”62
“…data collected on Google properties by Google
Analytics may also be used, togethe r with some of the
advertising cookies described above”63
Advertising (related to
measurement)
“Google Ad Manager collects da ta to provide the
relevant services, including: ... To measure ad
performance (e.g., how many ads were served
and how man y clickstho se ads received) and
provide reporting”65
“Depending on the publisher’s settings, the user’s
preferences and the device in question, the collected
data may include:
The request itself, such as the browser’s request for an
ad to be served on a non-Google website and the a d
slot to be filled; System and d evice information, such
as the device, browser version, operating sy stem
version, default language and screen size ; IP address;
Location; Th e datean d timeo f the request; In the
case of web browsers, the full URL of the page being
visited together with the referrer URL; In the case of
mobile devices, mobile network information; In the
case of mobile a pplications,an id entifier for the
application and a resettable mobile advertising
identifier (such as IDFA fo r iOS or AdID for Android); In
the case of web browsers, any cookie IDs that Google
has previously set on the user’s device; and Event
data such as impression, click, or co nversion data.
Google Ad Manager may also collect such data
through tags on the publisher’s property or the Google
Mobile Ads software development k it (SDK) on the
user’s app.
It can also collect publisher-provided IDs. In addition,
Google Ad Manager allow s publishers to integrate
audience data, such a s audience lists and lists of
cookie IDs with inferred interests, from their o wn data
management platform.66
Advertising (related to
measurement)
“...to help advertisers measure how often an
online ad campaign helps drive traffic to
physical stores or properties”67
This vague language may confla te or omit many
distinct processing purposes.
“Store visit conversions”are explain ed to advertisers
in Google’s help documentation for business
customers.68
Advertising (related to
measurement)
“Advertising. … to make advertising more
engaging to users and more valuable to
“...Some common applications are…”70 suggests
the existence of other purposes that are not
“Sometimes advertising cookies may b e set on the
domain of the site you’re visiting. In the case of
advertising we serve across the web, cookies (e.g.,
6
Category
Purported processing purpose
Other discoverable processing purpos es
Data collected
Data shared externally
Explanation and examples
publishers and advertisers. ...Some common
applications of cookies are …”69
specified. This vague language may conflate or
omit many distinct processing purposes..
cookies named ‘__gads’ or ‘__gac’) may be set on the
domain of the site you’re visiting. Unlike cookies that
are set on Google’s own domains, these cookies can’t
be read by Google when you’re on a site other than
the one on which they were set.”71
Advertising (related to
measurement)
“purposes such as ... p reventing the same ads
from being shown to you too many times.”72
“...such as…”73 is vague language that may
conflate or omit many distinct p rocessing
purposes.
“Sometimes advertising cookies may b e set on the
domain of the site you’re visiting. In the case of
advertising we serve across the web, cookies (e.g.,
cookies named ‘__gads’ or ‘__gac’) may be set on the
domain of the site you’re visiting. Unlike cookies that
are set on Google’s own domains, these cookies can’t
be read by Google when you’re on a site other than
the one on which they were set.”74
Advertising (related to
measurement)
“to help advertisers determine how many
times people who clic k on their ads end up
taking an action on their site (e.g., making a
purchase). These cookies allow Google and
the advertiser to determine that you clicked
the ad and later visited the advertiser’s
site.”75
“Google also uses conversion cook ies( e.g., cookies
named ‘__gcl’) … Some of our other cookies may be
used to measure conversion even tsa s well. For
example, Google Marketing Platform and Google
Analytics cookies may also be used for this purpose.”76
Advertising (related to
measurement)
“to link your activity across devices if you’ve
previously signed in to your Google Account
on another device. We d o this to ... measure
conversion events.”77
“We also use cookies named ‘AID,’ ‘DSID,’ and
‘TAID’”78
Advertising (related to
targeting)
“Google uses the information shared by sites
and apps to ... per sonalize ... ads you see on
Google ... sites and a pps.”79
“For example, when you visit a website that uses advertising
services like AdSense, includi ng analytics tools like Google
Analytics, or embeds video co ntent from YouTube, your web
browser automatically sends certain in formation to Google.
This includes the URL of the page you’re visiting and your IP
address. We may also set coo kies on your browser or read
cookies that are already there. Ap ps that use Google
advertising services also share information with Google,
such as the name of the app and a un ique identifier for
advertising.”80
Advertising (related to
targeting)
“We use your gender to make Google
services more personal. … help us to: …
provide more relevant, tailored content you
might be interested in, like ad s”.81
“…like…”82 is vague language that may confla te or
omit many distinct processing purposes.
“your gender”83
Advertising (related to
targeting)
“Google uses the information shared by sites
and apps to ... per sonalize ... ads you see on
... our partners’ sites and apps.”84
“For example, when you visit a website that uses advertising
services like AdSense, includi ng analytics tools like Google
Analytics, or embeds video co ntent from YouTube, your web
browser automatically sends certain information to Google.
This includes the URL of the page you’re visiting and your IP
address. We may also set coo kies on your browser or read
cookies that are already there. Ap ps that use Google
advertising services also share information with Google,
such as the name of the app and a unique id entifierfo r
advertising.”85
Advertising (related to
targeting)
“Some ways Google uses your birthday. …
Determine your age group fo r personalized
recommendations and ads…”86
“…some ways…”and “…ads…”is vague language
that may conflate or omit many d istinct processing
purposes.87
Advertising (related to
targeting)
“helps Google give you more personalised
experiences across Google services, such as ...
useful ads, both on and o ff Google.”88
“…such as…”89 is vague language that may confla te
or omit many distinct processing purposes.
“Additional Web & App Activity saves your activity from
sites, apps and de vices that use Google services, including:
activity from sites and ap ps that partner with Google to
show ads
Chrome history (if Chrome Sync is turned on)
app activity, including data that apps share with Google
Android usage & dia gnostics,such as ba ttery level, how
often you use your device and apps, and system errors
... This data may be saved and used in any Google service
where you are signed in...”90
“…both on and off Google”
is vague language that may
indicate extensive or minor
data sharing with an
unknowable number
Google’s business
partners.91
7
Category
Purported processing purpose
Other discoverable processing purpos es
Data collected
Data shared externally
Explanation and examples
Advertising (related to
targeting)
“This data helps Goog le give you more
personalised experiences across Google
services, such as ... useful ads, both on and
off Google.”92
“…such as…”93 is vague language that may confla te
or omit many distinct processing purposes.
“Location History saves where you go with your devices. To
save this data, Google regu larly obtains location data from
your devices. This data is saved even when you aren’t using
a specific Google service, such as Google Maps or Search. …
This data may be saved and used in any Google service
where you are signed in to give you more personalised
experiences.”94
“…both on and off Google”
is vague language that may
indicate extensive or minor
data sharing with an
unknowable number
Google’s business
partners.95
Advertising (related to
targeting)
“Gmail ads are based on you r activity”96
This vague language may confla te or omit many
distinct processing purposes.
“The ads that you see in Gmail are based on data associated
with your Google acco unt.For e xample, your activity in
other Google services such as Y ouTube or Search could affect
the types of ads that you see in Gmail.”97
Advertising (related to
targeting)
“Google Play ads h elp you discover apps that
you might like”98
“When you browse on an Android device, ads may appear
based on your search terms, apps that you’ve installed or
used, or an app’s similarity to the app that you’re using.”99
“When you browse on an Android device, ads may
appear based on your search terms, apps that you’ve
installed or used, or an app’s similarity to the app that
you’re using.”100
Advertising (related to
targeting)
“Search ads use your activity to be more
personally relevant”101
“Most of the time, these ads are prompted by the search
that you just did and you r location. For example, if you
search for ‘bikes’, you might see ads for bicycles on sale nea r
you. In other cases, we use a dditional data like your past
searches or sites that you ha ve visited to help deliver more
useful ads.”102
“Since you have already searched for ‘bikes’, if you
now search for ‘holida ys’ you might see Search ads for
places to go cycling while on holiday.”103
Advertising (related to
targeting)
“Shopping Ads help you find what you’re
looking for”104
“These ads are based on the product that you just searched
for, your location and online retailers that you’ve browsed in
the past.”105
“For example, if you search for ‘leather sofa’, you may
see ads with pictures, prices a nd shop locations for
leather sofas on sale at fu rniture shops near you.”106
Advertising (related to
targeting)
“YouTube ads use you r search and watch
activity to be more relevant”107
“Ads may be based on data such as the videos that you’ve
watched, things or places that you’ve searched for or apps
that you use.”108
“For example, if you search for ‘home decor’ or watch
do-it-yourself videos, you might see an ad for a home
improvement series.”109
Advertising (related to
targeting)
“This info helps Go ogle show ads that may be
useful to you.”110
This vague language may confl ate or omit many
distinct processing purposes.
“your activity on: Google services (such a s Search or
YouTube)
Websites and apps that p artner with Google to show ads ”111
“Personalization applies to [REDACTED-EMAIL-
ADDRESS] across your devices. For exampl e, if you visit
a travel website on your h ome computer in the
morning, you might see ads about train tickets on your
phone later that day.”112
Advertising (related to
targeting)
“Advertising… Google uses cookies like NID
and SID to help customize ads on Google
properties, like Google Search.”114
“...we use such cook ies to remember your most recent
searches, your previous interactions with an advertiser’s ads
or search results, and your visits to an advertiser’s website.
This helps us to show you customized ad s on Google.”115
Advertising (related to
targeting)
“We also use one or more cookies for
advertising we serve across the web … on
non-Google sites. … Google properties, like
YouTube, may also use these cookies to show
you more relevant ads.”116
“One of the main advertising cookies on non-Google
sites is named ‘IDE’ and is stored in browsers under the
domain doubleclick.net. Ano theris s tored in
google.com and is called A NID. We use other cookies
with names such as DSID, FLC, AID, TA ID, and
exchange_uid.”117
Advertising (related to
targeting)
“to help show more relevant ads on Google
properties (like Google Search) and across
the web...”118
This vague language may confla te or omit many
distinct processing purposes.
“data collected on Google properties by Google
Analytics may also be used, togethe r with some of the
advertising cookies described above”119
Advertising (related to
targeting)
“helps us show you ... more relevant ads...”120
This vague language may confla te or omit many
distinct processing purposes.
“...your searches and activity from a n umber of other Google
services are saved to your Google Account. The activity
saved to Web & App Activity may also include location
information… The location used and stored with your Web &
App Activity can come from signals like the device’s IP
address, your past activity, or from your device, if you’ve
chosen to turn on your device’s location settings.”121
8
Category
Purported processing purpose
Other discoverable processing purpos es
Data collected
Data shared externally
Explanation and examples
Advertising (related to
targeting)
“to make ads more useful to you on websites
and apps...”122
This vague l anguage may conflate or omit many
distinct processing purposes.
“By including non-Google activity, Google will: ...
Use Google Account activity to make ads more useful to you
on websites and ap ps...”123
Advertising (related to
targeting)
“to make ads more useful to you on websites
and apps...”124
This vague language may conflate or omi t many
distinct processing purposes.
“By including non-Google activity, Google will:
Include your browsing d ata from non-Google websites and
apps that partner with Goog le, including those that show
ads from Google, in you r Google Account
Store that data with other data in your Google Account
based on your ac tivitycon trolsp references ...
, and improve Google services
This setting applies across all o f your signed-in d evices and
across all Google services.”125
Advertising (related to
targeting)
“Ads can be served b ased on your general
location”126
This vague language may confla te or omit many
distinct processing purposes.
“This can include location derived from the device’s IP
address. Depending on your ads personalization settings,
you may also see ads b ased on your activity in you r Google
Account. This includes activity stored in your Web & Ap p
Activity, which can be used for more useful ads. Another
example is if you have enabled Location History and
regularly frequent ski resorts, you might la ter see an ad for
ski equipment when watching a video on YouTube.”127
Advertising (related to
targeting)
“personalized ads based o n your interests”128
This vague language may confla te or omit many
distinct processing purposes.
“Reasons you might see an ad
Your info:
Info in your Google Account, like your age range and gen der
Your general location
Your activity:
Your current search que ry
Previous search activity
Your activity while you were signed in to Google
Your previous interactions with ad s
Types of websites you visit
Types of mobile app a ctivityon you r device
Your activity on an other device
Other info:
The time of day
Info you gave to an advertiser, like if you signed up for a
newsletter with your email a ddress
Google can personalize ads so they’re more useful to you.
Personalized ads aren’t shown or hidden from you based on
sensitive categories, like race, religion, sexua l orientation, or
health.”129
“Unique identifiers can b e used for ... providing
personalized advertising.”130
“For example, if you search for “mountain bikes,”you
may see an ad for sports equipment when you’re
browsing a site that shows ads served by Google. You
can control what information we use to show you ads
by visiting your ad settings.”131
“You may also see personalized ads based on
information from the advertiser. If you shopped on an
advertiser’s website, for example, they can use that
visit information to show you ads.”132
“For example, we may think that you’re a football fan
because you watched highlights from a recent match
on YouTube, or looked up ‘football fields near me’ on
Google Search. And if you’ve spent time on a partner
advertiser’s site, we may suggest ads based on that
visit.”133
“Depending on your Ad Settings and if you’re signed
in, this data informs the a ds that you see across your
devices and across sites that partner with us to show
ads. So if you visit a travel website on your computer
at work, you might see other a ds served by Google
about airfares to Paris on your p hone later that
night.”134
Advertising (related to
targeting)
“Partner websites and apps use your o nline
activity to create ads that are more useful to
you”135
This vague language may confl ate or omit many
distinct processing purposes.
“When we show ads on these partners’ sites and apps, they
are based on what you’re reading or watching, audience
‘types’ based on personal information that our users have
shared with us, and d ata that we collect about your on line
activities”136
“…for instance, ‘35- to 44-year-old females who are
interested in travel’. … For example, you might see an
ad for those hiking shoes that you added to your
online shopping basket bu t decided not to buy. .”137
Advertising (related to
targeting)
“to… make the ads you see more relevant to
you.”138
This vague language may confla te or omit many
distinct processing purposes.
“If you add you r phone number to your account ”139
“If “Ads Personalization”is turned on , your phone
number might be used to make the ads you see more
relevant to you. For example, if you use your phone
number for a loyalty p rogram, you might see related
ads while using Google Search.”140
Advertising (related to
targeting)
“This data helps Goog le give you more
personalised experiences across Google
services, such as ... useful ads, both on and
off Google.”141
“…such as…”142 is vague language that may
conflate or omit many distinct p rocessing
purposes.
“YouTube search history saves your YouTube searches. …
This data may be saved and used in any Google service
where you are signed in to give you more personalised
experiences.”143
“…both on and off Google”
is vague language that may
indicate extensive or minor
data sharing with an
unknowable number
Google’s business
partners.144
9
Category
Purported processing purpose
Other discoverable processing purpos es
Data collected
Data shared externally
Explanation and examples
Advertising (related to
targeting)
“This data helps Goog le give you more
personalised experiences across Google
services, such as … useful ads, both on and
off Google.”145
“…such as…”146 is vague language that may
conflate or omit many distinct p rocessing
purposes.
“YouTube watch history saves the YouTube videos you
watch and listen to. … This data may be saved and used in
any Google service where you are signed in to give you more
personalised experiences.”147
“…both on and off Google”
is vague language that may
indicate extensive or minor
data sharing with an
unknowable number
Google’s business
partners.148
Analytics
“to determine a user’s inclusion in an
experiment and the exp iryo f experiments a
user has been inclu ded in.”149
Analytics
“Google Analytics is Google’s analytics tool
that helps website and ap p owners to
understand how their visitors engage with
their properties”
“It may use a set of co okies to collect information and
report site usage statistics withou t personally
identifying individual visitors to Goog le. The main
cookie used by Google Analytics is the ‘_ga’ cookie.”150
Analytics
“to provide the Google Analytics
measurement service to customers”151
“Identifiers such as cookies a nd app instance IDs are used to
measure user interactions with a customer’s sites and/or
apps, while IP addresses are used to provide and protect the
security of the service, and to give the customer a sense of
where in the world their users come from.”152
“First-party Cookies
Google Analytics collects first-party cook ies, data related to
the device/browser, IP address and on-site/app activities to
measure and report statistics abo ut user interactions on the
websites and/or apps that use Goo gle Analytics. Customers
may customize cookies and the data collected with features
like cookie settings, User-ID, Data Import, a nd Measurement
Protocol. ...
Google Analytics customers who h ave for instance, enabled
the analytics.js or gtag.js collection method can control
whether or not they use co okies to store a pseudon ymous or
random client identifier. If the cu stomer decides to set a
cookie, the information stored in the local first-party cookie
is reduced to a rand om identifier (e.g., 12345.67890).
For customers who use the Google Ana lyticsf or Apps SDK,
we collect an A pp Instance Identifier, which is a numbe r that
is randomly generated wh en the user installs an app f or the
first time.
Advertising identifiers
Where customers use Google An alytics Advertising Features,
Google advertising cookies are collected and used to enable
features like Remarketing on the Google Display Network.
These features are subject to the users’ Ads Settings, the
Policy requirements for Google An alyticsA dvertising
Features and Google’s EU User Consent policy, which
requires customers to obtain con sent for cookies where
legally required—including consent for personalized ads. For
more information about how Google uses advertising
cookies, visit the Google Advertising Privacy FAQ. It is
possible to implement Google A nalyticswitho ut affecting
normal data collection where Advertising features are
disabled until con sent is obtained.
IP Address
Google Analytics uses IP addresses to derive the geolocation
of a visitor, and to protect the service and provide security to
our customers. Customers may a pply IP masking so that
Google Analytics uses only a p ortion of an IP ad dress
“We use a variety of tools to do this, including Google
Analytics. When you visit sites that use Googl e
Analytics, Google and a Google Analytics customer
may link information a bout your activity from that site
with activity from other sites tha t use our ad
services.”154
“Google Analytics relies on first -party cookies, which
means the cookies are set by the Google Anal ytics
customer. Using our systems, data generated through
Google Analytics can be linked by the Google Analytics
customer and by Google to third -party cookies that
are related to visits to other websites. For example, an
advertiser may want to use its Google Ana lyticsd ata
to create more relevant ads, or to further analyze its
traffic.”155
10
Category
Purported processing purpose
Other discoverable processing purpos es
Data collected
Data shared externally
Explanation and examples
collected, rather than the entire address. In addition,
customers can override IPs at will using ou r IP Override
feature.”153
Android
“helps us provide fea tureslik e automatic
product updates ...”156
“…provide features like…”157 is vague langua ge
that may conflate or omit many d istinct processing
purposes.
“information about the apps, browsers, and de vicesyou u se
to access Google services. … The information we collect
includes unique identifiers, browser type an d settings, device
type and settings, operating system, mobile network
information including carrier name and phone number, and
application version number. We also collect information
about the interaction of your a pps, browsers, and devices
with our services, including IP a ddress,crash repo rts, system
activity, and the date, time, and referrer URL of your
request.
We collect this information when a Google service on your
device contacts our servers —fo r example, when you install
an app from the Play Store or when a service checks for
automatic updates. If you’re using an Android device with
Google apps, your device p eriodically contacts Google
servers to provide info rmation about your device and
connection to our services. This in formation includes things
like your device type, carrier name, crash repo rts,a nd which
apps you’ve installed.”158
“For example, we can use information from your
devices to help you decide which device you’d like to
use to install an app or view a movie you buy from
Google Play.”159
Android
“helps us provide features like … dimming
your screen if your batte ry runs low”160
“…provide features like…”161 is vague langua ge
that may conflate or omit many d istinct processing
purposes.
“information about the apps, browsers, and de vicesyou u se
to access Google services. … The information we collect
includes unique identifi ers,browser type a nd settings, device
type and settings, operating system, mobile network
information including carrier name and phone number, and
application version number. We also collect information
about the interaction of your a pps, browsers, and devices
with our services, including IP a ddress,crash repo rts, system
activity, and the date, time, and referrer URL of you r
request.
We collect this information when a Google service on your
device contacts our servers —fo r example, when you install
an app from the Play Store or when a service checks for
automatic updates. If you’re using an Android device with
Google apps, your device pe riodically contacts Google
servers to provide info rmation about your device and
connection to our services. This in formation includes things
like your device type, carrier name, crash repo rts,a nd which
apps you’ve installed.”162
“For example, we can use information from your
devices to help you decide which device you’d like to
use to install an app or view a movie you buy from
Google Play.”163
Anti-fraud & security
“Temporary log data is used on ly for security and
stability purposes. This data is u sed to identify
and mitigate security threats and /or to fix,
maintain, or improve Google DNS services.”164
“Google Public DNS, is opt-in for Chrome users. Google
retains two types of d ata from Google Public DNS que ries,
temporary logs and permanent l ogs: Temporary logs contain
some personal information and are deleted after 48
hours.”165
Anti-fraud & security
“Google uses the information shared by sites
and apps to ... protect against fraud and
abuse”166
This vague language may confla te or omit many
distinct processing purposes.
“For example, when you visit a website that uses advertising
services like AdSense, includi ng analytics tools like Google
Analytics, or embeds video co ntent from YouTube, your web
browser automatically sends certain information to Google.
This includes the URL of the page you’re visiting and your IP
address. We may also set co okies on your browser or read
cookies that are already there. Ap ps that use Google
advertising services also share information with Google,
such as the name of the app and a unique id entifierfo r
advertising”.167
Anti-fraud & security
“to help protect your acco unt.”169
This vague language may confla te or omit many
distinct processing purposes.
“information about the apps, browsers, and de vicesyou u se
to access Google services. … The information we collect
includes unique identifiers, browser type an d settings, device
type and settings, operating system, mobile network
information including carrier name and phone number, and
application version number. We also collect information
about the interaction of your a pps, browsers, and devices
with our services, including IP a ddress,crash repo rts, system
11
Category
Purported processing purpose
Other discoverable processing purpos es
Data collected
Data shared externally
Explanation and examples
activity, and the date, time, and referrer URL of your
request.
We collect this information when a Google service on your
device contacts our servers —fo r example, when you install
an app from the Play Store or when a service checks for
automatic updates. If you’re using an Android device with
Google apps, your device p eriodically contacts Google
servers to provide info rmation about your device and
connection to our services. This in formation includes things
like your device type, carrier name, crash repo rts,a nd which
apps you’ve installed.”170
Anti-fraud & security
“Detect, prevent, or otherwise address fraud,
security, or technical issues.”171
This vague language may confla te or omit many
distinct processing purposes.
Anti-fraud & security
“to protect against automated abu se. … such
as … stealing money from advertisers by
fraudulently clicking on a ds ...”172
“…such as…”173 is vague language that may
conflate or omit many distinct p rocessing
purposes.
“Collecting and analyzing IP addresses and cookie”174
“Ad fraud information is “retained for extended time
periods”175
“Unique identifiers can be used f or ... security and fraud
detection”176
“This abuse takes many f orms, such as sending spam
to Gmail users, stealing mone y from advertisers by
fraudulently clicking on ads, or censoring content by
launching a Distributed Denial of Service (DDoS)
attack.”177
Anti-fraud & security
“to protect against automated abuse. … such
as ... censoring content by launching a
Distributed Denial of Service (DDoS)
attack.”178
“…such as…”179 is vague language that may
conflate or omit many distinct p rocessing
purposes.
“Collecting and analyzing IP addresses and cookie”180
“Ad fraud information is “retained for extended time
periods”181
“Unique identifiers can be used f or ... security and fraud
detection”182
“This abuse takes many f orms, such as sending spam
to Gmail users, stealing mone y from advertisers by
fraudulently clicking on ads, or censoring content by
launching a Distributed Denial of Service (DDoS)
attack.”183
Anti-fraud & security
“help you find out if and when someone
accessed your email without you r
knowledge.”184
“information about recent activity in Gmail, such as the IP
addresses that accessed your mail, the as sociated location,
and the date and time of access.”185
“Unique identifiers can be u sed for ... security and fraud
detection”186
“The “last account activity”feature in Gmail”187
Anti-fraud & security
“Security. … We use security cookies to …
protect user data from unauthorized parties.
… such as attempts to steal the content of
forms that you complete on web pages.”188
“For example, we use cookies called ‘SID’ and ‘HSID’
which contain digitally signed and encrypted records
of a user’s Google account ID and most recent sign-in
time. The combination o f these two cookies allows us
to block many types of a ttack, such as attempts to
steal the content of forms that you complete on web
pages.”189
Anti-fraud & security
“Protect Google, our users, an d the public. …
This includes detecting, preventing, and
responding to fraud, abuse, security risks,
and technical issues that could harm
Google...”190
“We may also collect information about you from ... security
partners who provide us with information to protect against
abuse.”191
“Other partners help
Google with securing our
services; information about
security threats can help u s
notify you if we thin k your
account has been
compromised (at which
point we can help you take
steps to protect your
account).”192
Anti-fraud & security
“Protect against harm to the righ ts, property
or safety of Google, our u sers, or the public
as required or permitted b y law.”194
This vague language may confla te or omit many
distinct processing purposes.
Anti-fraud & security
“Protect Google, our users, and the public. …
This includes detecting, preventing, and
responding to fraud, abuse, security risks,
and technical issues that could harm ... the
public.”195
“We may also collect inf ormation about you from ... security
partners who provide us with information to protect against
abuse.”196
“Other partners help
Google with securing our
services; information about
security threats can help u s
notify you if we thin k your
account has been
compromised (at which
point we can help you take
12
Category
Purported processing purpose
Other discoverable processing purpos es
Data collected
Data shared externally
Explanation and examples
steps to protect your
account).”197
Anti-fraud & security
“Protect against harm to the righ ts, property
or safety of Google, our u sers, or the public
as required or permitted b y law.”198
Anti-fraud & security
“Protect Google, our users, and the public. …
This includes detecting, preventing, and
responding to fraud, abuse, security risks,
and technical issues that could harm ... our
users...”199
“We may also collect information about you from ... security
partners who provide us with information to protect against
abuse.”200
“Other partners help
Google with securing our
services; information about
security threats can help u s
notify you if we thin k your
account has been
compromised (at which
point we can help you take
steps to protect your
account).”201
Anti-fraud & security
“Protect against harm to the righ ts, property
or safety of Google, our u sers, or the public
as required or permitted b y law.”202
Anti-fraud & security
“to protect against automated abuse. … such
as sending spam to Gmail user s ...”203
“…such as…”204 is vague language that may
conflate or omit many distinct p rocessing
purposes.
“Collecting and analyzing IP addresses and cookie”205
Ad fraud information is “retained for extended time
periods”206
“Unique identifiers can be used fo r ... security and fraud
detection”207
“This abuse takes many f orms, such as sending spam
to Gmail users, stealing mone y from advertisers by
fraudulently clicking on ads, or censoring content by
launching a Distributed Denial of Service (DDoS)
attack.”208
Anti-fraud & security
“to help us detect a buse such as ...
malware...”209
“…such as…”210 is vague language that may
conflate or omit many distinct p rocessing
purposes.
“we analyze your content”211
“Unique identifiers can be used f or ... security and fraud
detection”212
“When we detect spam, malware, illega l content, and
other forms of abuse o n our systems in violation o f our
policies, we may disable your account or take other
appropriate action. In certain circumstances, we may
also report the violation to appropriate authorities.”213
Anti-fraud & security
“to help us detect abuse such as spam...”214
“…such as…”215 is vague language that may
conflate or omit many distinct p rocessing
purposes.
“we analyze your content”216
“Unique identifiers can be used f or ... security and fraud
detection”217
“When we detect spam, malware, illeg al content, and
other forms of abuse o n our systems in violation o f our
policies, we may disable your account or take other
appropriate action. In certain circumstances, we may
also report the violation to appropriate authorities.”218
Anti-fraud & security
“Enforce applicable Terms of Service,
including investigation of potential
violations.”219
Anti-fraud & security
“When Safe Browsing is enabled in Chrome,
Chrome contacts Google’s servers
periodically to download the most recent
Safe Browsing list of unsafe sites including
sites associated with phishing , social
engineering, malware, unwanted software,
malicious ads, intrusive ads, and abusive
websites or Chrome extensions.”220
“If you navigate to a URL that appears on the list, Chrome
sends a partial URL f ingerprint (the first 32 bits of a SHA -256
hash of the URL) to Google for verification that the URL is
indeed dangerous. Chrome also sends a partial URL
fingerprint when a site requests a potentially dangerous
permission, so that Google can protect you if the site is
malicious. Google cannot determine the actual URL from this
information. ... In addition to the URL check described
above, Chrome also conducts client-side checks. If a website
looks suspicious, Chrome sends a subset of likely ph ishing
and social engineering terms found on the page to Google,
in order to determine whe ther the website should be
considered malicious. Chrome can also help protect you from
phishing if you type one of your previously saved passwords
into an uncommon site. In this case Chrome sends the URL
and referrers of the page to Google to see if the page might
be trying to steal you r password. ... For ... un verified
potentially dangerous file downloads, Chrome sends Goo gle
the information needed to help determine whether the
download is harmful, in cluding some or all of the f ollowing:
information about the full URL of the site or file download,
all related referrers and redirects, code signing certificates,
file hashes, and file h eader information. ... Google logs the
transferred data in its raw form and retains this data for up
to 30 days. Google c ollects standard log information fo r Safe
13
Category
Purported processing purpose
Other discoverable processing purpos es
Data collected
Data shared externally
Explanation and examples
Browsing requests, including an IP address and one or more
cookies. After at most 30 d ays, Safe Browsing deletes the
raw logs, storing only calculated data in an anonymized
form that does not incl ude your IP addresses or cooki es.
Additionally, Safe Browsing requests won’t be associated
with your Google Account. They are, how ever,tied to the
other Safe Browsing requests made from the same
device.”221
Anti-fraud & security
“You can also opt in to reporting additional
data relevant to security to help improve
Safe Browsing and security on the
Internet.”222
“If you opt in, Chrome will send an incid ent report to Google
every time you receive a warning, visit a suspicious page,
and on a very small fraction of sites where Chrome thinks
there could be threats, to help Safe Browsing learn about
the new threats you may be encountering. The rep orts...
can include URLs, headers, and snippe tsof co ntent from the
page ... If Chrome discover s unwanted or malicious software
on your machine, the reports may also inclu de details about
malicious files and registry entries. ... Chrome al so sends a
request to Safe Browsing each time you start to enter a
password on a page that isn’t in Chrome’s local list. In
addition, the request Chrome sends to Safe Browsing to
determine the reputation of the website on which you reuse
your password includes the li sto f websites for which you
saved this password in Chrome’s password manager (but
not the password itself). ... Google logs the transferred data
in its raw form and retains this data for up to 30 days.
Google collects standard log in formation for Safe Browsing
requests, including an IP ad dressa nd one or more cookies.
After at most 30 day s, Safe Browsing deletes the raw log s,
storing only calculated data in an anonymized form that
does not include your IP add resses or cookies. Additionally,
Safe Browsing requests won’t be associated with your
Google Account. They are, however, tied to the othe r Safe
Browsing requests made from the same device.”223
Anti-fraud & security
“to improve the quality of download
protection”224
“Chrome may ask you to opt in to reporting to Google Safe
Browsing some data relevant to security ... Once you’ve
opted in, some down loaded files that are suspicious will be
sent to Google for investigation each time they are
encountered.”225
Anti-fraud & security
“...improving Google’s ability to detect
unwanted software...”226
“System information includes metadata a bout programs
installed or running on your system that could be associated
with harmful software, such as: services and processes,
scheduled tasks, system registry values common ly used by
malicious software, command-line argu mentsof Chrome
shortcuts, Windows proxy settings, an d software modules
loaded into Chrome or the network stack. ... stored for up to
14 days, after which only aggregated statistics are
retained.”227
Chrome
“to determine the aggregate popularity and
usage of applications and exten sions”228
This vague language may confla te or omit many
distinct processing purposes.
“...information (such as the application ID, when the
application was last used, and how long it’s been
installed).”229
Chrome
“to keep you up to date with the latest and
most secure versions”230
“information necessary for the update process, such as the
version of Chrome, its release chan nel, basic hardware
information, and update errors that have been encountered.
The update requests also send Google information that
helps us understand how many people are using Google
Chrome and the Chrome Apps Launcher
⎼
specifically,
whether the software was used in the last day, the number
of days since the last time it was used, the total number of
days it has been in stalled, and the number of active p rofiles.
Google Update also periodically sends a non-unique four-
letter tag that contains info rmation about how you o btained
Google Chrome. This tag is no t personally identifiable, does
not encode any information about when you obtained
Google Chrome, and is the same as everyone who obtained
14
Category
Purported processing purpose
Other discoverable processing purpos es
Data collected
Data shared externally
Explanation and examples
Google Chrome the same way. Because Chrome OS updates
the entire OS stack, Google Update on Chrome OS also sends
the current Chrome OS version and hardware model
information to Google ... This information is not personally
identifiable, and is common to all users of Chrome OS on the
same revision of device. ... If you install web apps on an
Android device, a Google server is responsible for creating a
native Android package that can be verified for authenticity
by Chrome. When Chrome is u pdated or notices that the
web app’s manifest has changed, Chrome asks the server fo r
a new version of the Android package in a cookieless
request. If the information needed to create the native
Android package cannot be acquired by the server (e.g.,
because the information is behind a corporate firewall) ,
Chrome sends it to Google and an Android package is
created that is unique to you . It contains a unique and
random identifier that is not tied to yo ur identity.”231
Chrome
“Google Chrome can show tips to help guide
you to the page you were trying to reach in
cases where the web ad dressca nnot be
found, a connection cannot be made , the
server returns a very short (under 512 byte)
error message, or you’ve navigated to a
parked domain.”232
“Google Chrome will first check the address against a
locally-stored list of suspected parked domains. If there is a
match, Chrome sends a partial fingerprint (a hash prefix) of
the URL to Google for verification that the domain is indeed
parked. ... In the case of other navigation errors, the URL of
the web page you’re trying to reach is stripped of all GET
parameters, and then sent to Google in order to retrieve
navigation tips. This information is lo gged and anonymized
in the same manner as Google web searches. The logs are
used to ensure and improve the quality of the feature. ...
when a domain name cannot be found, Chrome will
investigate the underlying cause by attempting to resolve
“google.com”using both Google Public DNS and the d efault
DNS service configured f or your system. ... In the event tha t
Chrome detects SSL connection timeouts, certificate errors,
or other network issues that might b e caused by a captive
portal (a hotel’s WiFi network, for instance), Chrome will
make a cookieless request to
https://www.gstatic.com/generate_204 and check the
response code. If that request is redirected, Chrome will
open the redirect target in a new tab on the assumption that
it’s a login page. Requests to the captive portal detection
page are not logged.”233
Chrome
“...to measure installations or reactivations
of Chrome through a campaign...”234
“Chrome will send a token or an identifier unique to your
device to Google at the first launch of Chrome, as well as the
first search using Google. On desktop versions of Chrome, a
token unique to your device is generated. The same token
will be sent if Chrome i s later reinstalled at first launch and
at first use of the Omnibox after reinstallation or
reactivation. Rather than storing the token on the computer,
it is generated when ne cessaryby using b uilt-in system
information that is scrambled in an irreversible manner. On
iOS, Chrome uses the IDFA for counting installations
acquired by a campaign, and it can be reset in iOS
settings.”235
Chrome
“...in order to help improve Chrome’s feature
set and stability.”236
“...information such as system information, preferences,
user interface feature usage, responsiveness, performance,
and memory usage. Crash reports contain system
information gathered at the time of the crash, and may
contain web page URLs or personal inf ormation depending
on what was happening at the time of the crash. ... Chrome
stores a randomly generated unique token on your device,
which is sent to Google a long with your usage statistics and
crash reports.”237
Chrome
“Desktop versions of Chrome can provide
smarter spell-checking...”238
“...Chrome sends the entire con tentso f text fields as you
type in them to Google, along with the browser’s default
language.”239
15
Category
Purported processing purpose
Other discoverable processing purpos es
Data collected
Data shared externally
Explanation and examples
Communicate with data
subject
“Communicate with you. … send you a
notification if we d etect suspicious activity,
like an attempt to sign in to your Google
Account from an u nusual location. Or we
may let you know ab out upcoming changes
or improvements to our services.241
“We use information we collect, like your email address, to
interact with you directly.”242
Communicate with data
subject
“Communicate with you. … we may let you
know about upcoming changes o r
improvements to our services.”243
“We use information we collect, like your email address, to
interact with you directly.”244
Contacts
“Provide our services. … helping you share
content by suggesting recipients from you r
contacts.”246
Crisis response
“Google’s Crisis Response products are
designed to inform you about emergencies
and other extreme events. Y our reports are
used to help others affected by these
crises.”247
Customer support
“Communicate with you. … if you contact
Google, we’ll keep a record of your request in
order to help solve an y issues you might be
facing.”248
“We use information we collect, like your email address, to
interact with you directly.”249
Customer support
“Provide our services. … to provide support in
connection with the product or service you
purchase.”250
“When you purchase services o r physical goods from us, you
may provide us information like your ship ping address or
delivery instructions.”251
Detect illegal content
“to help us detect a buse such as ... illegal
content”252
“…such as…”253 is vague language that may
conflate or omit many distinct p rocessing
purposes.
“we analyze your content”254
“Unique identifiers can be u sed for ... security and f raud
detection”255
“When we detect spam, malware, illega l content, and
other forms of abuse o n our systems in violation o f our
policies, we may disable your account or take other
appropriate action. In certain circumstances, we may
also report the violation to appropriate authorities.”256
Email product
“helps people identify a n email coming from
you”257
“If other users already ha ve your email address or
other information that ide ntifiesyou , we may show
them your publicly visible Google Account information,
such as your name an d photo.”258
Email product
“Provide our services. … A flight confirmation
email you receive may be used to create a
“check-in”button that appears in your
Gmail.”259
This vague language may conflate or o mit many
distinct processing purposes.
Email product
“syncing services such as your e mail inbox”260
“...such as…”261 is vague language that may
conflate or omit many distinct p rocessing
purposes.
“Unique identifiers”262
Email product
“To ensure continuity of service for you and
other users.”263
“For example, when you share information with other
users (such as when you have sent an email to
someone else), deleting it from your Google Account
will not eliminate co pies maintained by the
recipients.”264
Essential network
communication
“Provide our services. … use the IP address
assigned to your device to send you the data
you requested, such as loading a YouTube
video.”265
16
Category
Purported processing purpose
Other discoverable processing purpos es
Data collected
Data shared externally
Explanation and examples
Essential session cookies
“Process cookies help make the website work
and deliver services that the web site visitor
expects, like navigating around web pages or
accessing secure areas of the website.
Without these cookies, the website cannot
function properly.”266
“For example, we use a cookie called ‘lbcs’ which
makes it possible for Goog le Docs to open many Docs
in one browser. Blocking this cookie would prevent
Google Docs from ope rating correctly.”267
Essential session cookies
“‘session state cookies’ to help us improve
our services, in order to improve our users’
browsing experience.”268
“Websites often collect info rmation about how users
interact with a website. This may include the pages
users visit most often and wh ether users get error
messages from certain page s.”269
Gboard product
“Your Gboard learned words help … to
predict searches that you might be i nterested
in.”270
“When Sync learned words is turned o n for a device, your
learned words are saved to your Google Account to use
across devices.”271
Gboard product
“Your Gboard learned words help you with
spelling ...”272
“When Sync learned words is turned o n for a device, your
learned words are saved to your Google Account to use
across devices.”273
Government compliance
“Meet any applicable law, regula tion,leg al
process, or enforceable governmental
request.”274
Location
“showing you when a restaurant is typically
busy”275
“GPS, IP address, Sensor data from your de vice, Information
about things near yo ur device”276
“your device sends information to Goo gle about its location,
sensors (like accelerometer), and ne arby cell towers and Wi-
Fi access points (like MAC a ddressa nd signal strength).”277
Also see further related detail at
https://policies.google.com/technologies/location-data#how-
find
Location
“To help improve Location History”278
This vague language may confla te or omit many
distinct processing purposes.
“For example, sent information coul d include:
Quality and leng th of your connections to mobile networks,
GPS, Wi-Fi networks, or Bluetooth. State of your l ocation
settings. Restarts and crash reports. Ap ps used to turn
Location History on or off. Battery levels”279
Location
“This data helps Goo gle give you more
personalised experiences across Google
services, such as ... tips about your commute
... both on and off Google.”280
“…such as…”281 is vague language that may
conflate or omit many distinct p rocessing
purposes.
“Location History saves where you go with your devices. To
save this data, Google regu larly obtains location data from
your devices. This data is saved even when you aren’t using
a specific Google service, such as Google Maps or Search. …
This data may be saved and used in any Google service
where you are signed in to give you more personalised
experiences.”282
“…both on and off Google”
is vague language that may
indicate extensive or minor
data sharing with an
unknowable number
Google’s business partners.
283
Location
“How Google Maps g etsyou p laces faster”284
“When you use the Google Maps app, your phone send s
anonymous bits of da ta about your location back to
Google”285
“For instance, Maps can d etect when a lot of veh icles
are moving slowly along the same street and let you
know there is heavy traff ic.”286
Location
“making sure your search results in clude
things near you”287
This vague language may confla te or omit many
distinct processing purposes.
“GPS, IP address, Sensor data f romyou rd evice, Information
about things near yo ur device”288
“your device sends information to Goo gle about its location,
sensors (like accelerometer), and ne arby cell towers and Wi-
Fi access points (like MAC a ddressa nd signal strength).”289
Also see further related detail at
https://policies.google.com/technologies/location-data#how-
find
Location
“helps us offer fe atures like driving directions
for your weekend ge taway...”290
“…offer features like…”291 is vague language that
may conflate or omit many distin ct processing
purposes.
“GPS, IP address, Sensor data from your de vice, Information
about things near yo ur device”292
“your device sends info rmation to Google about its location,
sensors (like accelerometer), and ne arby cell towers and Wi-
Fi access points (like MAC a ddressa nd signal strength).”293
17
Category
Purported processing purpose
Other discoverable processing purpos es
Data collected
Data shared externally
Explanation and examples
Also see further related detail at
https://policies.google.com/technologies/location-data#how-
find
Location
“to provide improved ... commute routes, an d
more.”294
“…and more”295 may cover many purposes.
“Location History creates a private map of where you go
with your signed-in phones”296
“This gives you improved map searches and commute
routes, as well as help ing you to rediscover the places
you’ve been and the routes you’ve travelled”297
Location
“provides more personalized e xperiences
across Google ... real-time information about
the best time to leave for home or work in
order to beat the t raffic...”298
“If you opt in to Location History and your device is reporting
location, the precise loc ation of your signed-in device s will
be collected and stored, even when you’re not actively using
a Google product or service. ”299
Location
“to provide improved map searches...”300
“Location History creates a private map of where you go
with your signed-in phones”301
“This gives you improved map searches and commute
routes, as well as help ing you to rediscover the places
you’ve been and the routes you’ve travelled”302
Location
“helps us offer f eatures like ... showtimes for
movies playing near you.”303
“…offer features like…”304 is vague language that
may conflate or omit many distin ct processing
purposes.
“GPS, IP address, Sensor data from your de vice, Information
about things near your d evice”305
“your device sends information to Goo gle about its location,
sensors (like accelerometer), and ne arby cell towers and Wi-
Fi access points (like MAC a ddressa nd signal strength).”306
Also see further related detail at
https://policies.google.com/technologies/location-
data#how-find
Location
“This data helps Goog le give you more
personalised experiences across Google
services, such as a map o f where you’ve
been… both on and off Google.”307
“…such as…”308 is vague language that may
conflate or omit many distinct p rocessing
purposes.
“Location History saves where you go with your devices. To
save this data, Google regu larly obtains location data from
your devices. This data is saved even when you aren’t using
a specific Google service, such as Google Maps or Search. …
This data may be saved and used in any Google service
where you are signed in to give you more personalised
experiences.”309
“…both on and off Google”
is vague language that may
indicate extensive or minor
data sharing with an
unknowable number
Google’s business
partners.310
Location
“provides more personalized e xperiences
across Google ... albums in Goog le Photos
automatically created from places you’ve
visited.”311
“If you opt in to Location History and your device is reporting
location, the precise loc ation of your signed-in device s will
be collected and stored, even when you’re not actively using
a Google product or service.”312
Location
“Albums in Google Photos automatical ly
created from places you’ve visited”313
“your Location History”314
Location
“This helps create your Timeline whe re
Location History data is stored”315
“If you opt in to Location History and your device is reporting
location, the precise loc ation of your signed-in device s will
be collected and stored, even when you’re not actively using
a Google product or service. ”316
Location
“Real-time information about the best time
to leave for home or wo rk in order to beat
the traffic”317
“your Location History”318
Maintain and improve
services
“Google uses the information shared by sites
and apps to ... maintain and improve ... our
services...”319
This vague language may confla te or omit many
distinct processing purposes.
“For example, when you visit a website that uses advertising
services like AdSense, includi ng analytics tools like Google
Analytics, or embeds video co ntent from YouTube, your web
18
Category
Purported processing purpose
Other discoverable processing purpos es
Data collected
Data shared externally
Explanation and examples
browser automatically sends certain information to Google.
This includes the U RL of the page you’re visiting and your IP
address. We may also set coo kies on your browser or read
cookies that are already there. Ap ps that use Google
advertising services also share information with Google,
such as the name of the app and a unique id entifier for
advertising.”320
Maintain and improve
services
“Maintain & improve our services. … to make
improvements to our services.”322
This vague language may confla te or omit many
distinct processing purposes.
“...for example, understanding whi ch search terms are
most frequently misspelled help s us improve spell-
check features used across our services”.323
“For example, we use cookies to analyze how people
interact with our services. An d that analysis can help
us build better products. For exa mple, it may help us
discover that it’s taking people too long to complete a
certain task or that the y have trouble finishing steps at
all. We can then redesign that feature and improve
the product for everyone.”324
Maintain services:
troubleshoot
“Maintain & improve our services. … to
ensure our services are working a s intended,
such as tracking ou tages or troubleshooting
issues that you report to us.”326
“For example, we continu ouslymon itor our systems to
look for problems. And if we find something wrong
with a specific feature, reviewing activity information
collected before the prob lem started allows us to fix
things more quickly.”327
Personalisation &
recommendations
“to improve Chrome’s understanding of the
languages you speak and when Chrome
should offer to translate text fo r you.”328
“If you’ve chosen to sync your Chrome history, statistics
about the languages of p ages you visit and about your
interactions with the translation feature will be sent to
Google...”329
Personalisation &
recommendations
“...automatic descriptions for users who a re
visually impaired...”330
“by sending the co ntents of images on pages you visit to
Google’s servers.”331
Personalisation &
recommendations
“Google also uses your s ynchronized
browsing data to provide personalized
Google products and services to you. ”333
This vague language may confla te or omit many
distinct processing purposes.
Personalisation &
recommendations
“How Chrome Auto-fill co mpletes forms for
you”335
“When you use Chrome, we can save things like your name,
address, phone number, email ad dressan d payment
information so that we can auto-complete these forms for
you.”336
Personalisation &
recommendations
“If you’ve chosen to sync your Chrome
history, and if Google is your d efault search
engine, the URL of the page you’re viewing is
sent to Google in order to provide better,
contextually relevant suggestions.”337
This vague language may confla te or omit many
distinct processing purposes.
“URLs are sent only for HTTP p ages and HTTPS pages, not
other schemes such as f ile: and ftp:”338
19
Category
Purported processing purpose
Other discoverable processing purpos es
Data collected
Data shared externally
Explanation and examples
Personalisation &
recommendations
“display suggestions for websites that you
might want to visit. … Chrome may suggest
content that is popu lar in your country or
region. ... Chrome tries to mak e personalized
suggestions that are useful to you. ”340
This vague language may confla te or omit many
distinct processing purposes.
“Chrome uses your IP a ddress to identify your country or
region. … Chrome uses the sites you have visited from your
local browsing history. … If you are signed into Chrome,
suggestions are also based on data stored in your Google
account activity.”341
Personalisation &
recommendations
“Chrome measures the quality of suggestions
by sending Google information about the sets
of suggestions that were d isplayed, and
those that were selected.”342
This vague language may confla te or omit many
distinct processing purposes.
“information about the sets of sugg estions that were
displayed, and those that were selected.”343
Personalisation &
recommendations
“For Chrome on Android, in certain countries,
Chrome may download the content of the
New Tab page sugg estions from Google, for
use while offline.”344
“Chrome sends to Google a cookieless request with the URL
for each suggestion, along with Chrome’s user agent string,
in order to render the c ontent.”345
Personalisation &
recommendations
“Customizing our services to p rovide you with
a better user experience ”346
This vague language may confla te or omit many
distinct processing purposes.
“For example, we may display a Google Doodle on the
Search homepage to celebrate an event specific to
your country.”347
Personalisation &
recommendations
“Google uses the information shared by sites
and apps to ... personalize content ... you see
on Google ...”348
This vague language may confla te or omit many
distinct processing purposes.
“For example, when you visit a we bsite that uses advertising
services like AdSense, includi ng analytics tools like Google
Analytics, or embeds video co ntent from YouTube, your web
browser automatically sends certain information to Google.
This includes the URL of the page you’re visiting and your IP
address. We may also set coo kies on your browser or read
cookies that are already there. Ap ps that use Google
advertising services also share information with Google,
such as the name of the app and a unique id entifierfo r
advertising.”349
Personalisation &
recommendations
“Google uses the information shared by sites
and apps to ... personalize content ... you see
on ... our partners’ sites and apps.”350
This vague language may confla te or omit many
distinct processing purposes.
“For example, when you visit a website that uses advertising
services like AdSense, includi ng analytics tools like Google
Analytics, or embeds video co ntent from YouTube, your web
browser automatically sends certain information to Google.
This includes the URL of the page you’re visiting and your IP
address. We may also set coo kies on your browser or read
cookies that are already there. Ap ps that use Google
advertising services also share information with Google,
such as the name of the app and a u nique identifierf or
advertising.”351
Personalisation &
recommendations
“Provide personalised services, including
content and ads. … to customize our services
for you, including providing … personalized
content...”352
This vague language may con flate or omit many
distinct processing purposes.
Personalisation &
recommendations
“helps Google give you more personalised
experiences across Google services, such as ...
content recommendations ... both on and off
Google.”353
“…such as…”354 is vague language that may
conflate or omit many distinct p rocessing
purposes.
“Additional Web & App Activity saves your activity from
sites, apps and de vices that use Google services, including:
activity from sites and ap ps that partner with Google to
show ads
Chrome history (if Chrome Sync is turned on )
app activity, including data that apps share with Google
Android usage & d iagnostics,such a s battery level, how
often you use your device and apps, and system errors
... This data may be saved and used in any Google service
where you are signed in...”355
“…both on and off Google”
is vague language that may
indicate extensive or minor
data sharing with an
unknowable number
Google’s business
partners.356
Personalisation &
recommendations
“This data helps Goog le give to you more
personalised experiences across Google
services, like ... suggesting creators tha t you
might like ... both on and off Google.”357
“…like…”358 is vague language that may confla te or
omit many distinct processing purposes.
“YouTube History saves the YouTube videos that you watch
and listen to and the things that you search for on YouTube.
… This data may be saved and used in any Google service
where you are signed in to give you more personalised
experiences.”359
“…both on and off Google”
is vague language that may
indicate extensive or minor
data sharing with an
unknowable number
Google’s business
partners.360
Personalisation &
recommendations
“This data helps Goog le give you more
personalised experiences across Google
services, such as recommendatio ns for
“…such as…”362 is vague language that may
conflate or omit many distinct p rocessing
purposes.
“YouTube search history saves your YouTube searches. …
This data may be saved and used in any Google service
“…both on and off Google”
is vague language that may
indicate extensive or minor
20
Category
Purported processing purpose
Other discoverable processing purpos es
Data collected
Data shared externally
Explanation and examples
content or creators that you’ll like ... both on
and off Google.”361
where you are signed in to give you more personalised
experiences.”363
data sharing with an
unknowable number
Google’s business
partners.364
Personalisation &
recommendations
“This data helps Goog le give you more
personalised experiences across Google
services, such as … seeing recommendations
for content that you’ll like ... both on and off
Google.”365
“…such as…”366 is vague language that may
conflate or omit many distinct p rocessing
purposes.
“YouTube watch history saves the YouTube videos you
watch and listen to. … This data may be saved and used in
any Google service where you are signed in to give you more
personalised experiences.”367
“…both on and off Google”
is vague language that may
indicate extensive or minor
data sharing with an
unknowable number
Google’s business
partners.368
Personalisation &
recommendations
“..helps Google give you more personalised
experiences across Google services. For
example, discovering new apps, films and
music that you’ll enjoy.”369
This vague language may confla te or omit many
distinct processing purposes.
“Your Google Play library activity, such a s purchases,
subscriptions and downloads,..”370
Advertising (related to
targeting)
“Some ways Google uses your birthday. …
Determine your age group fo r personalized
recommendations…”371
“…some ways…”and “…personalized
recommendations…” is vague language that may
conflate or omit many distinct p rocessing
purposes.372
Personalisation &
recommendations
“After you link a subscription to your
account, Google can personalize experiences
like:
Finding articles without signing in to an
account or hitting a paywall.
Getting articles from print subscriptions in
your search results.”373
This vague language may conflate or omi t many
distinct processing purposes.
“Manage linked subscriptions
Subscriptions can inclu de content like:
Google Play subscriptions
YouTube subscriptions
News subscriptions you’ve linked with your Google
Account”374
Personalisation &
recommendations
“to do things like recommend a YouTube
video you might like”375
“...do things like…”376 is vague language that may
conflate or omit many distinct p rocessing
purposes.
“The activity information we coll ect may include:
Terms you search for
Videos you watch
Views and interactions with con tent and ads
Voice and audio information when you use audio features
Purchase activity
People with whom you communicate or share content
Activity on third-party sites and ap ps that use our services
Chrome browsing history you’ve synced with your Google
Account
If you use our services to make and receive calls or send and
receive messages, we may collect telepho ny log information
like your phone number, callin g-partynu mber,recei ving-
party number, forwarding numbers, time and da te of calls
and messages, duration of call s,routing in formation, and
types of calls.”377
Personalisation &
recommendations
“Your ‘Not interested’ feedback is used to
remove videos from your Y ouTube
recommendations.”378
“The following recommended content can be removed from
the Home page on your computer:
Videos
Channels
Sections
Playlists
You can also remove recommended videos from the Watch
Next page on your co mputer”379
Personalisation &
recommendations
“...help Google deliver the best possible News
experience and signal other Google services
about your preferences. “380
This vague language may confla te or omit many
distinct processing purposes.
“Your preferences about News ….”381
Personalisation &
recommendations
“Provide personalised services, including
content and ads. … to customize our services
for you, including p roviding
recommendations...”382
This vague language may confla te or omit many
distinct processing purposes.
21
Category
Purported processing purpose
Other discoverable processing purpos es
Data collected
Data shared externally
Explanation and examples
Personalisation &
recommendations
“helps Google give you more personalised
experiences across Google services. For
example, discovering new products that
you’ll enjoy.”383
“to Make recommendations on items to buy.
Enable quick reorders of products you’ve
purchased before. Send reminders based on
your preferences and p ast orders”384
In this context, “…for example…”385 i s vague
language that may conflate or omit ma ny distinct
processing purposes.
“Your Google Shopping o rder activity, such as items that you
purchase through Buy With Google”386
“To help you get better results on Google Shopping, your
order history and past Google activity are used”387
Personalisation &
recommendations
“Your Word Coach answers are u sed to
personalise your game experience and show
words that are more relevant to you.”388
Personalisation &
recommendations
“to ... give you customized experiences in
Search, Maps, and other Google produ ct”389
This vague language may confla te or omit many
distinct processing purposes.
“Web & App Ac tivitysaves your searches a nd other activity
on Google services”390
Personalisation &
recommendations
“Your “Not Interested”feedback may b e used
to tune your recommendations.”391
Personalisation &
recommendations
“helps Google give you more personalised
experiences across Google services, such as
helpful app ... recommendations … both on
and off Google.”392
“…such as…”393 is vague language that may
conflate or omit many distinct p rocessing
purposes.
“Additional Web & App Activity saves your activity from
sites, apps and de vices that use Google services, including:
activity from sites and ap ps that partner with Google to
show ads
Chrome history (if Chrome Sync is turned on )
app activity, including data that apps share with Google
Android usage & d iagnostics,such a s battery level, how
often you use your device and apps, and system errors
... This data may be saved and used in any Google service
where you are signed in...”394
“…both on and off Google”
is vague language that may
indicate extensive or minor
data sharing with an
unknowable number
Google’s business
partners.395
Personalisation &
recommendations
“This data helps Goog le give you more
personalised experiences across Google
services, such as ... recommenda tions based
on places that you’ve visited ... both on and
off Google.”396
“…such as…”397 is vague language that may
conflate or omit many distinct p rocessing
purposes.
“Location History saves where you go with your devices. To
save this data, Google regu larly obtains location data from
your devices. This data is saved even when you aren’t using
a specific Google service, such as Google Maps or Search. …
This data may be saved and used in any Google service
where you are signed in to give you more personalised
experiences.”398
“…both on and off Google”
is vague language that may
indicate extensive or minor
data sharing with an
unknowable number
Google’s business
partners.399
Personalisation &
recommendations
“This data helps Goog le give to you more
personalised experiences across Google
services, like giving you better
recommendations ... both on and off
Google.”400
“…like…”401 is vague language that may confla te or
omit many distinct processing purposes.
“YouTube History saves the YouTube videos that you watch
and listen to and the things that you search for on YouTube.
… This data may be saved and used in any Google service
where you are signed in to give you more personalised
experiences.”402
“…both on and off Google”
is vague language that may
indicate extensive or minor
data sharing with an
unknowable number
Google’s business
partners.403
Personalisation &
recommendations
“help ... improve recommendatio ns in
YouTube and other Google services.”404
This vague language may confla te or omit many
distinct processing purposes.
“Your YouTube search history”405
“YouTube recommends videos that you may like ba sed on
what you have watche d before and what other people with
similar viewing histories have watched bef ore.”406
Personalisation &
recommendations
“YouTube History stores: Your Yo uTube
search history to make your future searches
faster ...”407
This vague language may con flate or omit many
distinct processing purposes.
Personalisation &
recommendations
“YouTube History stores: Your Yo uTube
search history to … improve your
recommendations.”408
This vague language may confla te or omit many
distinct processing purposes.
Personalisation &
recommendations
“Your YouTube watch history to mak e it
easier for you to fin d your recently watched
videos on YouTube…”409
Personalisation &
recommendations
“Your YouTube watch history to … avoid
getting recommendations for already
watched videos...”410
Personalisation &
recommendations
“Your YouTube watch history to …
improve your recommendations.”411
This vague language may confla te or omit many
distinct processing purposes.
22
Category
Purported processing purpose
Other discoverable processing purpos es
Data collected
Data shared externally
Explanation and examples
Personalisation &
recommendations
“provides more personalized e xperiences
across Google—restaurants suggested in
Google Maps based on dining spots you’ve
visited...”412
This vague language may confla te or omit many
distinct processing purposes.
“If you opt in to Location History and your device is reporting
location, the precise loc ation of your signed-in device s will
be collected and stored, even when you’re not actively using
a Google product or service. ”413
Personalisation &
recommendations
“Recommendations based on places you’ve
visited”414
This vague language may confla te or omit many
distinct processing purposes.
“your Location History”415
Personalisation &
recommendations
“remembering your preferences”416
“Unique identifiers”417
Personalisation &
recommendations
“Preferences. … These cookies allow our
websites to remember information tha t
changes the way the si te behaves or looks,
such as your preferred lan guage or the
region you are in. For instance, by
remembering your region, a website may be
able to provide you with local weather
reports or traffic n ews. These cookies can
also assist you in changing text size, font, and
other parts of web pa ges that you can
personalize.”418
“Most Google users will have a p references cookie
called ‘NID’ in their browsers. A browser sends this
cookie with requests to Google’s sites. The NID cookie
contains a unique ID Goo gle uses to remember your
preferences and other i nformation, such as your
preferred language (e.g. English) , how many search
results you wish to have shown per page (e.g. 10 or
20), and whether or not you wish to have Google’s
SafeSearch filter turned o n.”419
Personalisation &
recommendations
“This data helps Goog le give to you more
personalised experiences across Google
services, like ... remembering where you left
off when you resume a video ... both on and
off Google.”420
“…like…”421 is vague language that may confla te or
omit many distinct processing purposes.
“YouTube History saves the YouTube videos that you watch
and listen to and the things that you search for on YouTube.
… This data may be saved and used in any Google service
where you are signed in to give you more personalised
experiences.”422
“…both on and off Google”
is vague language that may
indicate extensive or minor
data sharing with an
unknowable number
Google’s business
partners.423
Personalisation &
recommendations
“help make your recently watched videos
easier to find ...”424
“Your YouTube watch h istory”425
“to make it easier for you to find your recently
watched videos on YouTube, avoid getting
recommendations for already wa tched videos, and
improve your recommendations.”426
Phone directory
“to...help people find and connect with
you…”427
“If you add you r phone number to your account ”428
Photos
“Provide our services. … Photos and videos
you upload to Google Photos are used to help
you create albums, animations, and o ther
creations that you can share.”429
Podcast listings
“Your Google app p odcast subscriptions
make it easy to find you r favourite podcasts
in the Google app and Google Assistant.”430
Search
“Google Chrome uses a combined web
address and search bar ( we call it the
“omnibox”) at the top of the browser
window. As you use the omnibox, your
default search engine can sugg esta ddresses
and search queries that ma y be of interest to
you. These suggestions make navigation and
searching faster and easier, and are turned
on by default...”431
“In order to provide these sugg estions, Chrome sends the
text you’ve typed into the omnibox, along with a general
categorization (e.g., “URL”, “search query”, or “unknown”),
to your default search engine. Chrome will also send a signal
to your default search engine when you focus in the
omnibox, telling it to g et ready to provide suggestions. That
signal includes the URL of the currently displayed search
engine results page. Your IP a ddress and certain cookie s are
also sent to your default search engine with all requests, in
order to return the results that are most relevant to you.
If Chrome determines that you r typing may contain
sensitive information, such as authentication credentials,
local file names, or URL data tha ti s normally encrypted, it
will not send the typed text.
If Google is your default search engine, when you select one
of the omnibox suggestions, Chrome sends your o riginal
search query, the suggestion you selected, and the position
of the suggestion back to Google. This information helps
improve the quality of the suggestion feature, and it’s
logged and anonymized in the same manner as Google web
23
Category
Purported processing purpose
Other discoverable processing purpos es
Data collected
Data shared externally
Explanation and examples
searches. Logs of these sug gestion requests are retained for
two weeks, after which 2% of the log da ta is randomly
selected, anonymized, and retained in o rder to improve the
suggestion feature.”432
Search
“If Google is your def ault search engine,
when you select one of the omnibox
suggestions, Chrome sends your origin al
search query, the suggestion you selected,
and the position of the suggestion back to
Google. This information helps improve the
quality of the suggestion feature”433
“it’s logged and anonymized in the same manner as Google
web searches. Logs of these suggestion requests are
retained for two weeks, after which 2% of the log data is
randomly selected, anonymized, and retaine d in order to
improve the suggestion feature.”434
Search
“If Google is set a s your default search
engine, Chrome will try to determine the
most appropriate locale for Google search
queries conducted from the o mnibox in order
to give you relevant search results based on
your location.”435
“In order to do this, Chrome will send a request to
google.com each time you start the browser. If you already
have any cookies from the go ogle.com domain, this request
will also include these co okies, and is logged as any normal
HTTPS request to google.com wou ld be.”436
“For example, if you were in Germany, your o mnibox
searches may go through goo gle.de instead of
google.com.”
Search
“to identify recommended search terms (for
example, tapping on “wha le”on a site about
the blue whale would lead to showing “bl ue
whale”).”437
“If you’ve enabled “Tap to Search”on Chrome Mobile you
can search for terms by tapping them. ... the word, the
surrounding text, and the home country of your device’s SIM
card are sent to Google ... The tapped word is logged in
accordance with standard Google logging policies, and the
surrounding text and home country are logged only when
the page is already in Google’s search index.”438
Search
“to improve your query sugg estions”440
This vague language may confla te or omit many
distinct processing purposes.
“If you’ve enabled “Tap to Search”on Chrome Mobile you
can search for terms by tapping them. ... the word, the
surrounding text, and the home country of your device’s SIM
card are sent to Google ... The tapped word is logged in
accordance with standard Google logging policies, and the
surrounding text and home country are logged only when
the page is already in Google’s search index. If you have
turned on “Make searches and browsing better”, the URL of
the page is also sent and logged, and is used to improve
your query suggestions.”441
Search
“to make searches faster...”443
This vague language may confla te or omit many
distinct processing purposes.
“Web & App Activity saves your searches an d other activity
on Google services”444
Search
“Google currently measures the qua ntityo f traffic
it refers to other website s by logging user activity
like queries and clicks, and then using tools that
analyze those logs to produce aggregate metrics
that, in our experience, correlate with user
satisfaction with Google Search results.”445
Search
“Provide our services. … processing the terms
you search for in order to return results”446
“We use automated systems that analyze your content to
provide you with things like customized search results…”447
Search
“helps us show you … more tailored
suggestions–like when you see your search
automatically suggested based on past
searches.”448
This vague language may confla te or omit many
distinct processing purposes.
“...your searches and activity f rom a number of other Google
services are saved to your Google Account. The activity
saved to Web & App Activity may also include location
information… The location used and stored with your Web &
App Activity can come f rom signals like the device’s IP
address, your past activity, or from your device, if you’ve
chosen to turn on your device’s location settings.”449
24
Category
Purported processing purpose
Other discoverable processing purpos es
Data collected
Data shared externally
Explanation and examples
Search
“helps us show you more useful search
results...”450
This vague language may confla te or omit many
distinct processing purposes.
“...your searches and activity from a n umber of other Google
services are saved to your Google Account. The activity
saved to Web & App Activity may also include location
information… The location used and stored with your Web &
App Activity can come from signals like the device’s IP
address, your past activity, or from your device, if you’ve
chosen to turn on your device’s location settings.”451
“As an example, if you type in “weather”in Search and
get weather results based on where you are, this
activity, including the location used to provide this
result, is saved to you r Web & App Activity.”452
Search
“Search results from other Google
products”453
This vague language may confla te or omit many
distinct processing purposes.
“You can search for information from other Google
products you use, like Gmail or Google Calendar. Try
searching for upcoming flights, restaurant
reservations, or appointments.”454
Search
“How Google Search h elps you find your own
information”455
“Google Search can fetch useful information from Gmail,
Google Photos, Calendar and more. … As long as you are
signed in, we will pu ll this information from other Google
services”456
“Just search for things like ‘my dentist appointment’,
‘show me my photos at the beach’ or ‘where is my
hotel reservation’.”457
Search
“Provide personalised services, including
content and ads. … to customize our services
for you, including providing … customized
search results.”458
This vague language may confla te or omit many
distinct processing purposes.
“...your previous searches and activity from othe r Google
services.”459
“For example, when you’re signed in to your Google
Account and have the Web & App Activity control
enabled, you can get more relevant search results that
are based on you r previous searches and activity from
other Google services.”460
Search
“This data helps Goog le give you more
personalised experiences across Google
services, such as ... faster searches ... both on
and off Google.”461
“…such as…”462 is vague language that may
conflate or omit many distinct p rocessing
purposes.
“YouTube search history saves your YouTube searches. …
This data may be saved and used in any Google service
where you are signed in to give you more personalised
experiences.”463
“…both on and off Google”
is vague language that may
indicate extensive or minor
data sharing with an
unknowable number
Google’s business
partners.464
Search
“This data helps Goog le give you more
personalised experiences across Google
services, such as makin g your recently
watched videos easier to find ... both on and
off Google.”465
“…such as…”466 is vague language that may
conflate or omit many distinct p rocessing
purposes.
“YouTube watch history saves the YouTube videos you
watch and listen to. … This data may be saved and used in
any Google service where you are signed in to give you more
personalised experiences.”467
“…both on and off Google”
is vague language that may
indicate extensive or minor
data sharing with an
unknowable number
Google’s business
partners.468
Search
“help make future searches faster ...”469
This vague language may confla te or omit many
distinct processing purposes.
“Your YouTube search history”470
“YouTube recommends videos that you may like ba sed on
what you have watched before and what other people with
similar viewing histories have watched bef ore.”471
Search
“How Google auto -completesyour
searches”472
“Our spelling correction model uses data from people who
have made the same mistake before to correct it for you. …
Your search history can also help Google auto-complete your
searches.”473
“That is how we know that when you type ‘Barsalona’,
you most likely mean ‘Barcelona’. …if you have
searched for ‘Barcelona flights’ before, we might
suggest this in the search box before you even finish
typing it.”474
Shopping
“Your tracked prices are u sed by Google
Shopping to send you price drop
notifications.”475
Stadia
“...help Google improve Stadia and provide
you with more personalised experiences
across Google services.”476
This vague language may confla te or omit many
distinct processing purposes.
“Your Stadia Store activities, such as p urchases,
subscriptions, code redemptions and othe r content that you
claim…”477
Transactions
“Provide our services. … processing, fulfilling,
and delivering your order”.478
“When you purchase services o r physical goods from us, you
may provide us information lik e your shipping address or
delivery instructions.”479
Transactions
“if you add a credit card or other payment
method to your Google Account, you can use
it to buy things acros s our services, like apps
in the Play Store.”480
“a credit card or other payment method [,] ... you r Google
Account .... We may also ask fo r other information, like a
business tax ID, to help process your p ayment.”481
“We also use algorithms to recognize patterns in
data”482
25
Category
Purported processing purpose
Other discoverable processing purpos es
Data collected
Data shared externally
Explanation and examples
Translation
“Google Translate helps people communicate
across languages by de tecting common
language patterns in phrases you ask it to
translate.”483
“phrases you ask it to translate.”484
Translation
“Chrome’s built-in translation feature”485
“...the contents of a web page are only sent to Google if you
decide to have it translated.”486
Unspecified
Unknown.
“Google Chrome uses a combined web address and search
bar (we call it the “omnibox”) at the top of the browser
window. … On Android, your location will also be sent to
Google via an X-Geo HTTP reque sth eader if Google is your
default search engine, the Chrome app has the permission to
use your geolocation, and you haven’t blocked geolocation
for www.google.com (or coun try-specific origins such as
www.google.de). Additionally, if your device ha s network
location enabled (High Accuracy or Battery Saving Device
Location mode in Android settings), the X-Geo header may
also include visible network IDs (WiFi and Cell), used to
geocode the request server-side.”487
Unspecified
“Google uses the inf ormation shared by sites
and apps to deliver our services…”489
This vague language may confla te or omit many
distinct processing purposes.
“For example, when you visit a website that uses advertising
services like AdSense, includi ng analytics tools like Google
Analytics, or embeds video co ntent from YouTube, your web
browser automatically sends certain information to Google.
This includes the URL of the page you’re visiting and your IP
address. We may also set coo kies on your browser or read
cookies that are already there. A pps that use Google
advertising services also share information with Google,
such as the name of the app and a unique id entifierfo r
advertising.”490
Unspecified
“Improve your experience across Google”491
This vague language may confl ate or omit many
distinct processing purposes.
“If you add you r phone number to your account ”492
“If “Across Google”is listed on your “Phone”pa ge, this
number can be used across Google services.”493
Unspecified
“to power future recommenda tions on
Google”494
This vague language may confla te or omit many
distinct processing purposes.
“If you opt in to Location History and your device is reporting
location, the precise loc ation of your signed-in device s will
be collected and stored, even when you’re not actively using
a Google product or service. ”495
Unspecified
“Measure performance. … to understand how
our services are used.”496
This vague language may confla te or omit many
distinct processing purposes.
Unspecified
Unknown.
“We may also collect information about you from trusted
partners, including marketing partners who provide us wi th
information about potential customers of our b usiness
services”497
Unspecified
Unknown.
“When you use Google services to do things like write a
message in Gmail or comment on a YouTube video, we store
the information you create.
When you search for a restaurant on Google Maps or watch
a video on YouTube, fo r example, we process information
about that activity - in cluding information like the video you
watched, device IDs, IP addresses, cookie d ata, and location.
We treat all of this as “p ersonal information”when it’s
associated with your Google Acc ount.
We also process the kinds of information described above
when you use a pps or sites that use Google services like ads,
Analytics, and the YouTube video player.”498
Unspecified
“How your Google Assistant can help you get
things done”499
This vague language may confla te or omit many
distinct processing purposes.
“data from other Google services”500
“For example, if you ask, ‘What coffee shops are
nearby?’ or ‘Do I need an umbrella tomorrow?’, your
Assistant uses information from Map s and Search as
well as your location, interests an d preferences to give
you the most relevant answer.”501
Unspecified
“Your saved routines ena ble Google Assistant
to do multiple things for you with just a
single command.”502
26
Category
Purported processing purpose
Other discoverable processing purpos es
Data collected
Data shared externally
Explanation and examples
Unspecified
“To help others find cool stuff online,”503
This vague language may confla te or omit many
distinct processing purposes.
“your activity (such as reviews, +1s, follows, shares, etc.)
may be used along with your name and photo in commercial
or other promotional con texts.”504
Verify the data subject’s age
“to verify that you meet age requirements”506
“In some cases, we may also need to verify your identity and
may ask you for information to do this.”507
‘We ask for authorization using a valid credit card or f or a
copy of a government issued ID in order to validate your
date of birth. We only use this information to confirm your
date of birth and to restore your account. If you choose the
option to provide a copy of your government ID, we will
destroy the copy of your g overnment ID after we valida te
your date of birth.
If you choose the option of a credit card authoriza tion, we
will confirm that the credit card is valid .W e will retain this
data as necessary to meet regulatory requirements for a
credit card transaction, after which it w ill be deleted.”508
“if, for example, you enter a n incorrect birthday
indicating you’re not old enough to have a Google
Account.”509
Voice & Face input
“...context for the Google Assistant.”510
“If you’ve enabled “Tap to Search”on Chrome Mobile you
can search for terms by tapping them. … Saying “Ok Google”
after long-pressing on a word provides the word and its
surrounding text as context fo r the Google Assistant.”511
Voice & Face input
“Voice and Face Match allow your Assistant
to tell you apart from others. This is done by
creating unique models o f your voice or face,
which are stored only on devices that you
enable.”513
“These models are initially created using data that you
provided when you turned on Voice or Face Match.”514
Voice & Face input
“to create unique models o f your voice and
face stored on your enabled devices.”515
“your Voice and Face Match enrolment data”516
Voice & Face input
“This data helps Goog le give you more
personalised experiences across Google
services, like improved speech recognition
when you say “Hey Google”to speak to your
Assistant, both on and off Google.”517
“…like…”518 is vague language that may confla te or
omit many distinct processing p urposes.
“Voice and audio recordings save a recording of your voice
and other audio in puts in your Web & app activity on Goog le
services and from sites, ap ps and devices that use or conn ect
to Google speech services. The recording only happen swhen
you use audio activation commands, like touch the
microphone icon or say command s like “Hey Google,”and
includes a few second s before to catch your request at the
right time.... This data may be saved and used in any Google
service where you are signed in to give you more
personalised experiences.”519
“…both on and off Google”
is vague language that may
indicate extensive or minor
data sharing with an
unknowable number
Google’s business
partners.520
Google Account
“desktop versions of Chrome, signing into or
out of any Goog le web service, like
google.com, signs you into or o ut of
Chrome”522
This vague language may confla te or omit many
distinct processing purposes.
“On both desktop and mobile, signing into Chrome keeps
you signed into Google web services until you sign out of
Chrome. On mobile, signing into Chrome will keep you
signed in with all Google Accounts that have been added to
the device. On desktop, it will keep you signed in with all
Google Accounts that you added from a Google web service,
unless you have set “Keep lo cal data only until you quit your
browser”in your cookie settings. ...”523
Google Account
“Google uses your personal synchron ized
data to provide you a consistent browsing
This vague language may confla te or omit many
distinct processing purposes.
“When you’re signed-in and have enabled sync with your
Google Account, your personal browsing data information is
saved in your Google Account so you may access it when you
27
Category
Purported processing purpose
Other discoverable processing purpos es
Data collected
Data shared externally
Explanation and examples
experience across your devices, and to
customize features in Chrome.”524
sign in and sync to Chrome on other computers and devices.
Synced data can include bookmarks, saved passwords, open
tabs, browsing history, extensions, addresses, phone
numbers, payment methods, and more. In advan ced sync
settings, you can choose which types of data to synchronize
with this device. By defa ult, all syncable data types are
enabled.”525
Google Account
“Chrome may help you sign in with
credentials you’ve saved in Android apps on
websites that are associated wi th the
respective apps. Likewise, credentials you’ve
saved for websites can be used to help you
sign into related Android app.”527
“passwords and/or other types of log in credentials”528
“If you’re signed into Chrome and are syncing
passwords and/or other types of log in credentials
without a sync passphrase, these creden tials are
stored in your Google Account.”529
Google Account
“Provide our services. … use unique
identifiers stored in cooki es on your device to
help us authenticate you as the person who
should have access to your Goo gle
Account.”530
Google Account
“If users choose to d ownload apps from the
Google Play Store, they must have a Go ogle
account, which is necessary for, amon g other
things, ... enabling parental con trols.”531
Google Account
“...to help you acce ssyou r account if you
forget your password...”532
“If you add you r phone number to your account ”533
Google Account
“If users choose to d ownload apps from the
Google Play Store, they must have a Go ogle
account, which is necessary for, amon g other
things, facilitating users to pu rchase apps ...”534
Google Account
“Security. … We use security cookies to
authenticate users ...”535
“For example, we use cookies called ‘SID’ and ‘HSID’
which contain digitally signed and encrypted records
of a user’s Google account ID and most recent sign-in
time. The combination o f these two cookies allows us
to block many types of a ttack, such as attempts to
steal the content of forms that you complete on web
pages.”536
Google Account
“Security. … We use security cookies to …
prevent fraudulent use of lo gin credentials
...”537
“For example, we use cookies called ‘SID’ and ‘HSID’
which contain digitally signed and encrypted records
of a user’s Google account ID and most recent sign-in
time. The combination o f these two cookies allows us
to block many types of a ttack, such as attempts to
steal the content of forms that you complete on web
pages.”538
Google Account
“We organize your purcha sesa nd
reservations in your Google A ccount to help
you get things don e. For example: You can
ask your Google Assistant about the shipp ing
status of a purchase.
You can ask your Google Assistant to show
you your flight reservations, o r use Search to
ask questions like, “Is my fli ght on time?”“539
In this context, “…for example…”ma y cover
multiple purposes. 540
“Food orders or Google shopp ing orders placed through
Search or Assistant
Reservations for restaurants, hotels, and hea lth and fitness
bookings created using Search, Map s,o r Assistant”541
Research & Development
“...to help us build prod ucts better suited for
your demographics.”542
This vague language may confla te or omit many
distinct processing purposes.
“...if you’re signed in to Chrome and have enabled Chrome
sync, Chrome may combine your declared age and gender
from your Google acco unt with our statistics ...”543
Research & Development
“...to improve our products and se rvices,fo r
example, by identifying web pages which
load slowly; this gives us in sight into how to
best improve overall Chrome performance.”
544
In this context, “...for exa mple, by...”545 is vague
language that may conflate or omit ma ny distinct
processing purposes.
“If you have also turned on “Make searches and b rowsing
better (Sends URLs of p ages you visit to Google) ”in the
“Sync and Google services”section of Chrome’s settings,
Chrome usage statistics include information about the web
pages you visit and you r usage of them. The info rmation will
28
Category
Purported processing purpose
Other discoverable processing purpos es
Data collected
Data shared externally
Explanation and examples
also include the URLs and statistics related to downloaded
files. If you sync extension s,the se statistics will also incl ude
information about the extensions tha t have been installed
from Chrome Web Store. The URLs and statistics are sent
along with a unique device identifier”546
Research & Development
“Google also uses agg regated and
anonymized synchronized browsing data to
improve other Google produ ctsa nd services.
For example, we use this in formation to
improve Google Search by helping to detect
mobile friendly pages, pag es which have
stopped serving content, and downloads of
malware.”547
In this context, “...for exa mple...”548i s vague
language that may conflate or omit ma ny distinct
processing purposes.
“...aggregated and anonymized synchronized browsing
data...”549
Research & Development
“Google uses the inf ormation shared by sites
and apps to ... develop new services…”550
This vague language may confla te or omit many
distinct processing purposes.
“For example, when you visit a website that uses advertising
services like AdSense, includi ng analytics tools like Google
Analytics, or embeds video co ntent from YouTube, your web
browser automatically sends certain information to Google.
This includes the URL of the page you’re visiting and your IP
address. We may also set coo kies on your browser or read
cookies that are already there. A pps that use Google
advertising services also share information with Google,
such as the name of the app and a unique id entifierfo r
advertising.”551
Research & Development
“Develop new services”553
This vague language may con flate or omit many
distinct processing purposes.
“We use the information we collect in existing services to
help us develop new ones.”554
“For example, understanding how pe ople organized
their photos in Picasa, Google’s first photos app,
helped us design and launch Google Photos.”555
Research & Development
“Measure performance. … we analyze data
about your visits to our sites to do things like
optimize product design”556
“…to do things like…”557 is vague language that
may conflate or omit many distin ct processing
purposes.
Research & Development
“YouTube survey answers are used to
improve the relevance of content and ads
that you and others may see on YouTube and
other Google produ cts.”558
“YouTube surveys appear in the interface and ask about
your YouTube experience or d emographics/interests.”559
Research & Development
“to … improve Google services”560
This vague language may confla te or omit many
distinct processing purposes.
“By including non-Google activity, Google will:
Include your browsing data from n on-Google websites and
apps that partner with Goog le, including those that show
ads from Google, in your Goo gle Account
Store that data w ith other data in your Google Acc ount
based on your ac tivitycon trolsp references
Use Google Account activity to make ads more useful to you
on websites and apps, and improve Google services
This setting app lies across all of your signed-in device s and
across all Google services.”561
Research & Development
“a variety of purposes, including development of
new products and services. We do not share
permanent logs outside of A lphabetInc. an d its
subsidiaries.”562
“Google Public DNS, is opt-in for Chrome users. Google
retains two types of d ata from Google Public DNS q ueries:
temporary logs and permanent log s: ... Permanent log data,
which does not contain any personal information.”563
“We do not share
permanent logs outside o f
Alphabet Inc. and its
subsidiaries”564
Research & Development
“To help us improve Android, you can let your
device send us inf ormation about how you
use it and how it’s working.”565
“Battery level, How often you use your apps, Quality and
length of your n etwork connections (like mobile, Wi-Fi, and
Bluetooth)”566
“Some aggregated info can
help partners, like Android
developers, make their
apps and products better,
too.”567
“For example, Google can use usage and diagnostics
info to improve: Battery life: Google can use info
about what’s using the most battery on your device to
help make common features use le ssba ttery. Crashing
or freezing on devices: Google can use info about
when apps crash and freeze on your device to help
make the Android operating system more reliable.”568
Research & Development
“...help train Google’s language models…”569
“information that’s publicly available online or from other
public sources”570
29
Category
Purported processing purpose
Other discoverable processing purpos es
Data collected
Data shared externally
Explanation and examples
Research & Development
“Google can use this data to improve its
speech recognition so it can understand you
better.”571
“If you turn this setting on and use voice commands (such as
“Ok Google”) or touch the microphone icon, Google will save
a recording of your voice and other audio inputs.”572
“Google uses your voice an d audio recordings to:
Learn the sound of your voi ce.
Learn how you say words and phrases.
Recognize when you say activation commands, like
“Hey Google”...”573
Research & Development
“Improve speech recognition across Google
products that use your voice.”574
“Improvements to speech models may also be sent to
Google without uploading your voice and audio
recordings. For example, when the Improve Gbo ard
setting is on, Gboard can improve word suggestions
for everyone without sending what you say to the
server.”575
Research & Development
“...help ... build features like Google
Translate”.577
“…help…build features like…”578 is vague
language that may conflate or omit ma ny distinct
processing purposes.
“information that’s publicly available online or from other
public sources”579
Appendix: information given when a person signs up for a Google Account
30
“Web & App Activity”dialogues at sign up
Clicking “Learn more”reveals the dialogue shown on the right.
“Location History”dialogues at sign up
Clicking “Learn more”reveals the dialogue shown on the right.
31
32
“YouTube History”text at sign up
33
Notes
1
Article 6(1)b, the General Data Protection Regulation.
2
URL: https://policies.google.com/technologies/retention#purpose-financial. Note: visit using a personal Google Account. Some settings or text may not
be visible to Google Business Accounts.
3
ibid.
4
ibid.
5
ibid.
6
ibid.
7
ibid.
8
ibid.
9
ibid.
10
ibid.
11
ibid.
12
ibid.
13
ibid.
14
ibid.
15
ibid.
16
ibid.
17
ibid.
18
ibid.
19
ibid.
20
URL: https://policies.google.com/technologies/ads. Note: visit using a personal Google Account. Some settings or text may not be visible to Google
Business Accounts.
21
ibid.
22
ibid.
23
ibid.
24
Google’s submission responding to questions for the record from US Congress Judiciary Subcommittee on Antitrust, Commercial, and Administrative
Law, hearing on “Online platforms and market power, part 2”, 16 July 2019 (URL: https://docs.house.gov/meetings/JU/JU05/20190716/109793/HHRG-
116-JU05-20190716-SD030.pdf), pp. 62-64.
25
ibid.
26
“ibid., p. 75.
34
27
URL: https://policies.google.com/technologies/types. Note: visit using a personal Google Account. Some settings or text may not be visible to Google
Business Accounts.
28
ibid.
29
Google’s submission responding to questions for the record from US Congress Judiciary Subcommittee on Antitrust, Commercial, and Administrative
Law, hearing on “Online platforms and market power, part 2”, 16 July 2019 (URL: https://docs.house.gov/meetings/JU/JU05/20190716/109793/HHRG-
116-JU05-20190716-SD030.pdf), pp. 62-64.
30
ibid.
31
ibid.
32
ibid.
33
ibid.
34
ibid.
35
ibid.
36
ibid.
37
ibid.
38
URL: https://developers.google.com/authorized-buyers/rtb/start
39
URL: https://developers.google.com/authorized-buyers/rtb/realtime-bidding-guide
40
URL: https://support.google.com/admanager/answer/9012903
41
URL: https://developers.google.com/third-party-ads/adx-vendors
42
URL: https://www.google.com/doubleclick/adxbuyer/guidelines/
43
URL: https://policies.google.com/technologies/partner-sites. Note: visit using a personal Google Account. Some settings or text may not be visible to
Google Business Accounts.
44
ibid.
45
URL: https://policies.google.com/privacy#enforcement. Note: visit using a personal Google Account. Some settings or text may not be visible to Google
Business Accounts.
46
ibid.
47
URL: https://policies.google.com/privacy#footnote-content-views. Note: visit using a personal Google Account. Some settings or text may not be visible
to Google Business Accounts.
48
ibid.
49
URL: https://policies.google.com/privacy/google-partners. Note: visit using a personal Google Account. Some settings or text may not be visible to
Google Business Accounts.
50
ibid.
35
51
“Your location information”in URL: https://policies.google.com/privacy#infocollect. Note: visit using a personal Google Account. Some settings or text
may not be visible to Google Business Accounts.
52
URL: https://policies.google.com/privacy/google-partners. Note: visit using a personal Google Account. Some settings or text may not be visible to
Google Business Accounts.
53
URL: https://policies.google.com/technologies/ads. Note: visit using a personal Google Account. Some settings or text may not be visible to Google
Business Accounts.
54
ibid.
55
URL: https://policies.google.com/technologies/types. Note: visit using a personal Google Account. Some settings or text may not be visible to Google
Business Accounts.
56
ibid.
57
ibid.
58
ibid.
59
ibid.
60
ibid.
61
ibid.
62
ibid.
63
ibid.
64
URL: https://policies.google.com/privacy#enforcement. Note: visit using a personal Google Account from within the European Economic Area. Some
settings or text may not be visible to Google Business Accounts.
65
Google’s submission responding to questions for the record from US Congress Judiciary Subcommittee on Antitrust, Commercial, and Administrative
Law, hearing on “Online platforms and market power, part 2”, 16 July 2019 (URL: https://docs.house.gov/meetings/JU/JU05/20190716/109793/HHRG-
116-JU05-20190716-SD030.pdf), pp. 62-64.
66
ibid.
67
“How is location used to show ads?”in URL: https://policies.google.com/technologies/location-data
68
URL: https://support.google.com/google-ads/answer/6100636. Note: visit using a personal Google Account. Some settings or text may not be visible to
Google Business Accounts.
69
URL: https://policies.google.com/technologies/types. Note: visit using a personal Google Account. Some settings or text may not be visible to Google
Business Accounts.
70
ibid.
71
ibid.
72
ibid.
73
ibid.
36
74
ibid.
75
ibid.
76
ibid.
77
ibid.
78
ibid.
79
URL: https://policies.google.com/technologies/partner-sites. Note: visit using a personal Google Account. Some settings or text may not be visible to
Google Business Accounts.
80
ibid.
81
URL: https://support.google.com/accounts/answer/27442#gender. Note: visit using a personal Google Account. Some settings or text may not be visible
to Google Business Accounts.
82
ibid.
83
ibid.
84
URL: https://policies.google.com/technologies/partner-sites. Note: visit using a personal Google Account. Some settings or text may not be visible to
Google Business Accounts.
85
ibid.
86
URL: https://support.google.com/accounts/answer/27442
87
ibid.
88
“Include Chrome history and activity from sites, apps and devices that use Google services”(once clicked) in URL:
https://myaccount.google.com/activitycontrols. Note: visit using a personal Google Account. Some settings or text may not be visible to Google
Business Accounts.
89
ibid.
90
ibid.
91
“ibid.
92
“Location History”(once clicked) in URL: https://myaccount.google.com/activitycontrols. Note: visit using a personal Google Account. Some settings or
text may not be visible to Google Business Accounts.
93
ibid.
94
ibid.
95
ibid.
96
“Using data to make ads more useful to you”in “Ads and data”URL: https://safety.google/privacy/ads-and-data/. Note: visit using a personal Google
Account. Some settings or text may not be visible to Google Business Accounts.
97
ibid.
98
ibid.
37
99
ibid.
100
ibid.
101
ibid.
102
ibid.
103
ibid.
104
ibid.
105
ibid.
106
ibid.
107
ibid.
108
ibid.
109
ibid.
110
“Ad personalization”(when clicked) in URL: https://adssettings.google.com/authenticated?hl=en. Note: visit using a personal Google Account. Some
settings or text may not be visible to Google Business Accounts.
111
ibid.
112
ibid.
113
ibid.
114
URL: https://policies.google.com/technologies/types. Note: visit using a personal Google Account. Some settings or text may not be visible to Google
Business Accounts.
115
ibid.
116
ibid.
117
ibid.
118
ibid.
119
ibid.
120
“Web & App Activity “in URL: https://policies.google.com/technologies/location-data. Note: visit using a personal Google Account. Some settings or
text may not be visible to Google Business Accounts.
121
ibid.
122
“Also use your activity & information from Google services to personalize ads on websites and apps that partner with Google to show ads. This stores
data from websites and apps that partner with Google in your Google Account.”(when clicked) in URL:
https://adssettings.google.com/authenticated?hl=en. Note: visit using a personal Google Account. Some settings or text may not be visible to Google
Business Accounts.
123
ibid.
124
ibid.
38
125
ibid.
126
“How is location used to show ads?”in URL: https://policies.google.com/technologies/location-data. Note: visit using a personal Google Account. Some
settings or text may not be visible to Google Business Accounts.
127
ibid.
128
URL: https://policies.google.com/privacy#whycollect. Note: visit using a personal Google Account. Some settings or text may not be visible to Google
Business Accounts.
129
URL: https://support.google.com/ads/answer/1634057. Note: visit using a personal Google Account. Some settings or text may not be visible to Google
Business Accounts.
130
URL: https://policies.google.com/privacy#footnote-unique-id. Note: visit using a personal Google Account. Some settings or text may not be visible to
Google Business Accounts.
131
URL: https://policies.google.com/privacy#whycollect. Note: visit using a personal Google Account. Some settings or text may not be visible to Google
Business Accounts.
132
URL: https://policies.google.com/privacy#footnote-personalized-ads. Note: visit using a personal Google Account. Some settings or text may not be
visible to Google Business Accounts.
133
URL: https://safety.google/privacy/privacy-controls/. Note: visit using a personal Google Account. Some settings or text may not be visible to Google
Business Accounts.
134
“Understanding how Google ads work”in “Ads and data”URL: https://safety.google/privacy/ads-and-data/. Note: visit using a personal Google
Account. Some settings or text may not be visible to Google Business Accounts.
135
“Using data to make ads more useful to you”in “Ads and data”URL: https://safety.google/privacy/ads-and-data/. Note: visit using a personal Google
Account. Some settings or text may not be visible to Google Business Accounts.
136
ibid.
137
ibid.
138
URL: https://policies.google.com/privacy#footnote-phone-number. Note: visit using a personal Google Account. Some settings or text may not be
visible to Google Business Accounts.
139
ibid.
140
URL: https://support.google.com/accounts/answer/3463280. Note: visit using a personal Google Account. Some settings or text may not be visible to
Google Business Accounts.
141
“Include your searches on YouTube”(once clicked) in URL: https://myaccount.google.com/activitycontrols. Note: visit using a personal Google Account.
Some settings or text may not be visible to Google Business Accounts.
142
ibid.
143
ibid.
144
ibid.
39
145
“Include the YouTube videos that you watch”(once clicked) in URL: https://myaccount.google.com/activitycontrols. Note: visit using a personal Google
Account. Some settings or text may not be visible to Google Business Accounts.
146
“Include the YouTube videos that you watch”(once clicked) in URL: https://myaccount.google.com/activitycontrols. Note: visit using a personal Google
Account. Some settings or text may not be visible to Google Business Accounts.
147
ibid.
148
ibid.
149
URL: https://developers.google.com/analytics/devguides/collection/analyticsjs/cookie-usage and see also URL:
https://marketingplatform.google.com/about/optimize/. Note: visit using a personal Google Account. Some settings or text may not be visible to
Google Business Accounts.
150
ibid.
151
URL: https://support.google.com/analytics/answer/6004245. Note: visit using a personal Google Account. Some settings or text may not be visible to
Google Business Accounts.
152
ibid., when one clicks the heading “What is the data used for?”.
153
ibid., when one clicks the heading “Data Collected by Google Analytics”.
154
URL: https://policies.google.com/privacy#whycollect. Note: visit using a personal Google Account. Some settings or text may not be visible to Google
Business Accounts.
155
URL: https://policies.google.com/privacy#footnote-link-info. Note: visit using a personal Google Account. Some settings or text may not be visible to
Google Business Accounts.
156
“Your apps, browsers & devices”in URL: https://policies.google.com/privacy#infocollect. Note: visit using a personal Google Account. Some settings or
text may not be visible to Google Business Accounts.
157
ibid.
158
ibid.
159
ibid.
160
ibid.
161
ibid.
162
ibid.
163
ibid.
164
Google’s submission responding to questions for the record from US Congress Judiciary Subcommittee on Antitrust, Commercial, and Administrative
Law, hearing on “Online platforms and market power, part 2”, 16 July 2019 (URL: https://docs.house.gov/meetings/JU/JU05/20190716/109793/HHRG-
116-JU05-20190716-SD030.pdf), pp. 96-97.
165
ibid.
40
166
URL: https://policies.google.com/technologies/partner-sites. Note: visit using a personal Google Account. Some settings or text may not be visible to
Google Business Accounts.
167
ibid.
168
URL: https://policies.google.com/privacy#enforcement. Note: visit using a personal Google Account from within the European Economic Area. Some
settings or text may not be visible to Google Business Accounts.
169
URL: https://policies.google.com/privacy#footnote-devices. Note: visit using a personal Google Account. Some settings or text may not be visible to
Google Business Accounts.
170
“Your apps, browsers & devices”in URL: https://policies.google.com/privacy#infocollect. Note: visit using a personal Google Account. Some settings or
text may not be visible to Google Business Accounts.
171
URL: https://policies.google.com/privacy#infosharing. Note: visit using a personal Google Account. Some settings or text may not be visible to Google
Business Accounts.
172
URL: https://policies.google.com/privacy#footnote-safety-reliability. Note: visit using a personal Google Account. Some settings or text may not be
visible to Google Business Accounts.
173
ibid.
174
ibid.
175
URL: https://policies.google.com/technologies/retention. Note: visit using a personal Google Account. Some settings or text may not be visible to
Google Business Accounts.
176
URL: https://policies.google.com/privacy#footnote-unique-id. Note: visit using a personal Google Account. Some settings or text may not be visible to
Google Business Accounts.
177
URL: https://policies.google.com/privacy#footnote-safety-reliability. Note: visit using a personal Google Account. Some settings or text may not be
visible to Google Business Accounts.
178
ibid.
179
ibid.
180
ibid.
181
URL: https://policies.google.com/technologies/retention. Note: visit using a personal Google Account. Some settings or text may not be visible to
Google Business Accounts.
182
URL: https://policies.google.com/privacy#footnote-unique-id. Note: visit using a personal Google Account. Some settings or text may not be visible to
Google Business Accounts.
183
URL: https://policies.google.com/privacy#footnote-safety-reliability. Note: visit using a personal Google Account. Some settings or text may not be
visible to Google Business Accounts.
184
ibid.
185
ibid.
41
186
URL: https://policies.google.com/privacy#footnote-unique-id. Note: visit using a personal Google Account. Some settings or text may not be visible to
Google Business Accounts.
187
URL: https://policies.google.com/privacy#footnote-safety-reliability. Note: visit using a personal Google Account. Some settings or text may not be
visible to Google Business Accounts.
188
URL: https://policies.google.com/technologies/types. Note: visit using a personal Google Account. Some settings or text may not be visible to Google
Business Accounts.
189
ibid.
190
URL: https://policies.google.com/privacy#footnote-safety-reliability. Note: visit using a personal Google Account. Some settings or text may not be
visible to Google Business Accounts.
191
“Your location information”in URL: https://policies.google.com/privacy#infocollect. Note: visit using a personal Google Account. Some settings or text
may not be visible to Google Business Accounts.
192
URL: https://policies.google.com/privacy/google-partners. Note: visit using a personal Google Account. Some settings or text may not be visible to
Google Business Accounts.
193
URL: https://policies.google.com/privacy#enforcement. Note: visit using a personal Google Account from within the European Economic Area. Some
settings or text may not be visible to Google Business Accounts.
194
URL: https://policies.google.com/privacy#infosharing. Note: visit using a personal Google Account. Some settings or text may not be visible to Google
Business Accounts.
195
URL: https://policies.google.com/privacy#footnote-safety-reliability. Note: visit using a personal Google Account. Some settings or text may not be
visible to Google Business Accounts.
196
“Your location information”in URL: https://policies.google.com/privacy#infocollect. Note: visit using a personal Google Account. Some settings or text
may not be visible to Google Business Accounts.
197
URL: https://policies.google.com/privacy/google-partners. Note: visit using a personal Google Account. Some settings or text may not be visible to
Google Business Accounts.
198
URL: https://policies.google.com/privacy#infosharing. Note: visit using a personal Google Account. Some settings or text may not be visible to Google
Business Accounts.
199
URL: https://policies.google.com/privacy#footnote-safety-reliability. Note: visit using a personal Google Account. Some settings or text may not be
visible to Google Business Accounts.
200
“Your location information”in URL: https://policies.google.com/privacy#infocollect. Note: visit using a personal Google Account. Some settings or text
may not be visible to Google Business Accounts.
201
URL: https://policies.google.com/privacy/google-partners. Note: visit using a personal Google Account. Some settings or text may not be visible to
Google Business Accounts.
42
202
URL: https://policies.google.com/privacy#infosharing. Note: visit using a personal Google Account. Some settings or text may not be visible to Google
Business Accounts.
203
URL: https://policies.google.com/privacy#footnote-safety-reliability. Note: visit using a personal Google Account. Some settings or text may not be
visible to Google Business Accounts.
204
ibid.
205
ibid.
206
URL: https://policies.google.com/technologies/retention. Note: visit using a personal Google Account. Some settings or text may not be visible to
Google Business Accounts.
207
URL: https://policies.google.com/privacy#footnote-unique-id. Note: visit using a personal Google Account. Some settings or text may not be visible to
Google Business Accounts.
208
URL: https://policies.google.com/privacy#footnote-safety-reliability. Note: visit using a personal Google Account. Some settings or text may not be
visible to Google Business Accounts.
209
ibid.
210
ibid.
211
ibid.
212
URL: https://policies.google.com/privacy#footnote-unique-id. Note: visit using a personal Google Account. Some settings or text may not be visible to
Google Business Accounts.
213
URL: https://policies.google.com/privacy#footnote-detect-abuse. Note: visit using a personal Google Account. Some settings or text may not be visible
to Google Business Accounts.
214
URL: https://policies.google.com/privacy#footnote-safety-reliability. Note: visit using a personal Google Account. Some settings or text may not be
visible to Google Business Accounts.
215
ibid.
216
ibid.
217
URL: https://policies.google.com/privacy#footnote-unique-id. Note: visit using a personal Google Account. Some settings or text may not be visible to
Google Business Accounts.
218
URL: https://policies.google.com/privacy#footnote-detect-abuse. Note: visit using a personal Google Account. Some settings or text may not be visible
to Google Business Accounts.
219
URL: https://policies.google.com/privacy#infosharing. Note: visit using a personal Google Account. Some settings or text may not be visible to Google
Business Accounts.
220
URL: https://www.google.com/chrome/privacy/whitepaper.html#malware. Note: visit using a personal Google Account. Some settings or text may not
be visible to Google Business Accounts.
221
ibid.
43
222
ibid.
223
ibid.
224
ibid.
225
ibid.
226
URL: https://www.google.com/chrome/privacy/whitepaper.html#unwantedsoftware. Note: visit using a personal Google Account. Some settings or
text may not be visible to Google Business Accounts.
227
ibid.
228
URL: https://www.google.com/chrome/privacy/whitepaper.html#update. Note: visit using a personal Google Account. Some settings or text may not
be visible to Google Business Accounts.
229
ibid.
230
ibid.
231
ibid.
232
URL: https://www.google.com/chrome/privacy/whitepaper.html#navtips. Note: visit using a personal Google Account. Some settings or text may not
be visible to Google Business Accounts.
233
ibid.
234
URL: https://www.google.com/chrome/privacy/whitepaper.html#measurepromotions. Note: visit using a personal Google Account. Some settings or
text may not be visible to Google Business Accounts.
235
ibid.
236
URL: https://www.google.com/chrome/privacy/whitepaper.html#usagestats. Note: visit using a personal Google Account. Some settings or text may
not be visible to Google Business Accounts.
237
ibid.
238
URL: https://www.google.com/chrome/privacy/whitepaper.html#spelling. Note: visit using a personal Google Account. Some settings or text may not
be visible to Google Business Accounts.
239
ibid.
240
ibid.
241
URL: https://policies.google.com/privacy#whycollect. Note: visit using a personal Google Account. Some settings or text may not be visible to Google
Business Accounts.
242
ibid.
243
ibid.
244
ibid.
245
URL: https://policies.google.com/privacy#enforcement. Note: visit using a personal Google Account from within the European Economic Area. Some
settings or text may not be visible to Google Business Accounts.
44
246
URL: https://policies.google.com/privacy#whycollect
247
“Crisis Response User Reports”in URL: https://myactivity.google.com/more-activity. Note: visit using a personal Google Account. Some settings or text
may not be visible to Google Business Accounts.
248
URL: https://policies.google.com/privacy#whycollect. Note: visit using a personal Google Account. Some settings or text may not be visible to Google
Business Accounts.
249
ibid.
250
URL: https://policies.google.com/privacy#footnote-deliver-services. Note: visit using a personal Google Account. Some settings or text may not be
visible to Google Business Accounts.
251
ibid.
252
URL: https://policies.google.com/privacy#footnote-safety-reliability. Note: visit using a personal Google Account. Some settings or text may not be
visible to Google Business Accounts.
253
ibid.
254
ibid.
255
URL: https://policies.google.com/privacy#footnote-unique-id. Note: visit using a personal Google Account. Some settings or text may not be visible to
Google Business Accounts.
256
URL: https://policies.google.com/privacy#footnote-detect-abuse. Note: visit using a personal Google Account. Some settings or text may not be visible
to Google Business Accounts.
257
URL: https://policies.google.com/privacy#whycollect. Note: visit using a personal Google Account. Some settings or text may not be visible to Google
Business Accounts.
258
ibid.
259
URL: https://policies.google.com/privacy#footnote-deliver-services. Note: visit using a personal Google Account. Some settings or text may not be
visible to Google Business Accounts.
260
URL: https://policies.google.com/privacy#footnote-unique-id. Note: visit using a personal Google Account. Some settings or text may not be visible to
Google Business Accounts.
261
URL: https://policies.google.com/privacy#footnote-unique-id. Note: visit using a personal Google Account. Some settings or text may not be visible to
Google Business Accounts.
262
ibid.
263
URL: https://policies.google.com/technologies/retention#purpose-continuity. Note: visit using a personal Google Account. Some settings or text may
not be visible to Google Business Accounts.
264
ibid.
265
URL: https://policies.google.com/privacy#whycollect. Note: visit using a personal Google Account. Some settings or text may not be visible to Google
Business Accounts.
45
266
URL: https://policies.google.com/technologies/types. Note: visit using a personal Google Account. Some settings or text may not be visible to Google
Business Accounts.
267
ibid.
268
ibid.
269
ibid.
270
“Gboard learned words”in URL: https://myactivity.google.com/more-activity. Note: visit using a personal Google Account. Some settings or text may
not be visible to Google Business Accounts.
271
ibid.
272
ibid.
273
ibid.
274
URL: https://policies.google.com/privacy#infosharing. Note: visit using a personal Google Account. Some settings or text may not be visible to Google
Business Accounts.
275
“Why does Google use location information?”in URL: https://policies.google.com/technologies/location-data
276
URL: https://policies.google.com/privacy#infocollect. Note: visit using a personal Google Account. Some settings or text may not be visible to Google
Business Accounts.
277
URL: https://policies.google.com/privacy#footnote-near-device. Note: visit using a personal Google Account. Some settings or text may not be visible to
Google Business Accounts.
278
“Usage & diagnostics for Location History”in URL: https://support.google.com/accounts/answer/3118687. Note: visit using a personal Google Account.
Some settings or text may not be visible to Google Business Accounts.
279
ibid.
280
“Location History”(once clicked) in URL: https://myaccount.google.com/activitycontrols. Note: visit using a personal Google Account. Some settings or
text may not be visible to Google Business Accounts.
281
ibid.
282
ibid.
283
ibid.
284
URL: https://safety.google/privacy/data/. Note: visit using a personal Google Account. Some settings or text may not be visible to Google Business
Accounts.
285
ibid.
286
ibid.
287
“Why does Google use location information?”in URL: https://policies.google.com/technologies/location-data. Note: visit using a personal Google
Account. Some settings or text may not be visible to Google Business Accounts.
46
288
URL: https://policies.google.com/privacy#infocollect. Note: visit using a personal Google Account. Some settings or text may not be visible to Google
Business Accounts.
289
URL: https://policies.google.com/privacy#footnote-near-device. Note: visit using a personal Google Account. Some settings or text may not be visible to
Google Business Accounts.
290
“Your location information”in URL: https://policies.google.com/privacy#infocollect. Note: visit using a personal Google Account. Some settings or text
may not be visible to Google Business Accounts.
291
ibid.
292
URL: https://policies.google.com/privacy#infocollect. Note: visit using a personal Google Account. Some settings or text may not be visible to Google
Business Accounts.
293
URL: https://policies.google.com/privacy#footnote-near-device. Note: visit using a personal Google Account. Some settings or text may not be visible to
Google Business Accounts.
294
URL: https://support.google.com/accounts/answer/6139018. Note: visit using a personal Google Account. Some settings or text may not be visible to
Google Business Accounts.
295
ibid.
296
ibid.
297
“Location History”in “Privacy Checkup”URL: https://myaccount.google.com/privacycheckup. Note: visit using a personal Google Account. Some
settings or text may not be visible to Google Business Accounts.
298
“Google Location History”in URL: https://policies.google.com/technologies/location-data. Note: visit using a personal Google Account. Some settings
or text may not be visible to Google Business Accounts.
299
Location data collection methods at URL: https://policies.google.com/technologies/location-data#how-find. Note: visit using a personal Google
Account. Some settings or text may not be visible to Google Business Accounts.
300
URL: https://support.google.com/accounts/answer/6139018. Note: visit using a personal Google Account. Some settings or text may not be visible to
Google Business Accounts.
301
“Location History creates a private map of where you go with your signed-in phones”
302
“Location History”in “Privacy Checkup”URL: https://myaccount.google.com/privacycheckup. Note: visit using a personal Google Account. Some
settings or text may not be visible to Google Business Accounts.
303
“Your location information”in URL: https://policies.google.com/privacy#infocollect. Note: visit using a personal Google Account. Some settings or text
may not be visible to Google Business Accounts.
304
ibid.
305
URL: https://policies.google.com/privacy#infocollect. Note: visit using a personal Google Account. Some settings or text may not be visible to Google
Business Accounts.
47
306
URL: https://policies.google.com/privacy#footnote-near-device. Note: visit using a personal Google Account. Some settings or text may not be visible to
Google Business Accounts.
307
“Location History”(once clicked) in URL: https://myaccount.google.com/activitycontrols
308
ibid.
309
ibid.
310
ibid.
311
“Google Location History”in URL: https://policies.google.com/technologies/location-data. Note: visit using a personal Google Account. Some settings
or text may not be visible to Google Business Accounts.
312
See location data collection methods at URL: https://policies.google.com/technologies/location-data#how-find. Note: visit using a personal Google
Account. Some settings or text may not be visible to Google Business Accounts.
313
“What happens after you delete some or all Location History”in URL: https://support.google.com/accounts/answer/3118687. Note: visit using a
personal Google Account. Some settings or text may not be visible to Google Business Accounts.
314
ibid.
315
“Google Location History”in URL: https://policies.google.com/technologies/location-data. Note: visit using a personal Google Account. Some settings
or text may not be visible to Google Business Accounts.
316
See location data collection methods at URL: https://policies.google.com/technologies/location-data#how-find. Note: visit using a personal Google
Account. Some settings or text may not be visible to Google Business Accounts.
317
“What happens after you delete some or all Location History”in URL: https://support.google.com/accounts/answer/3118687. Note: visit using a
personal Google Account. Some settings or text may not be visible to Google Business Accounts.
318
ibid.
319
URL: https://policies.google.com/technologies/partner-sites. Note: visit using a personal Google Account. Some settings or text may not be visible to
Google Business Accounts.
320
ibid.
321
URL: https://policies.google.com/privacy#enforcement. Note: visit using a personal Google Account from within the European Economic Area. Some
settings or text may not be visible to Google Business Accounts.
322
URL: https://policies.google.com/privacy#whycollect. Note: visit using a personal Google Account. Some settings or text may not be visible to Google
Business Accounts.
323
ibid.
324
URL: https://policies.google.com/privacy#footnote-make-improvements. Note: visit using a personal Google Account. Some settings or text may not be
visible to Google Business Accounts.
325
URL: https://policies.google.com/privacy#enforcement. Note: visit using a personal Google Account from within the European Economic Area. Some
settings or text may not be visible to Google Business Accounts.
48
326
URL: https://policies.google.com/privacy#whycollect. Note: visit using a personal Google Account. Some settings or text may not be visible to Google
Business Accounts.
327
URL: https://policies.google.com/privacy#footnote-ensure-working. Note: visit using a personal Google Account. Some settings or text may not be
visible to Google Business Accounts.
328
URL: https://www.google.com/chrome/privacy/whitepaper.html#translate
329
ibid.
330
URL: https://www.google.com/chrome/privacy/whitepaper.html#descriptions
331
ibid.
332
ibid.
333
URL: https://www.google.com/chrome/privacy/whitepaper.html#signin
334
ibid.
335
URL: https://safety.google/privacy/data/. Note: visit using a personal Google Account. Some settings or text may not be visible to Google Business
Accounts.
336
ibid.
337
URL: https://www.google.com/chrome/privacy/whitepaper.html#omnibox
338
ibid.
339
ibid.
340
URL: https://www.google.com/chrome/privacy/whitepaper.html#NTP
341
ibid.
342
ibid.
343
ibid.
344
ibid.
345
ibid.
346
URL: https://policies.google.com/privacy#enforcement. Note: visit using a personal Google Account from within the European Economic Area. Some
settings or text may not be visible to Google Business Accounts.
347
ibid.
348
URL: https://policies.google.com/technologies/partner-sites. Note: visit using a personal Google Account. Some settings or text may not be visible to
Google Business Accounts.
349
ibid.
350
ibid.
351
ibid.
49
352
URL: https://policies.google.com/privacy#whycollect. Note: visit using a personal Google Account. Some settings or text may not be visible to Google
Business Accounts.
353
“Include Chrome history and activity from sites, apps and devices that use Google services”(once clicked) in URL:
https://myaccount.google.com/activitycontrols. Note: visit using a personal Google Account. Some settings or text may not be visible to Google
Business Accounts.
354
ibid.
355
ibid.
356
ibid.
357
“YouTube History”(once clicked) in URL: https://myaccount.google.com/activitycontrols. Note: visit using a personal Google Account. Some settings or
text may not be visible to Google Business Accounts.
358
ibid.
359
ibid.
360
ibid.
361
“Include your searches on YouTube”(once clicked) in URL: https://myaccount.google.com/activitycontrols. Note: visit using a personal Google Account.
Some settings or text may not be visible to Google Business Accounts.
362
ibid.
363
ibid.
364
ibid.
365
“Include the YouTube videos that you watch”(once clicked) in URL: https://myaccount.google.com/activitycontrols. Note: visit using a personal Google
Account. Some settings or text may not be visible to Google Business Accounts.
366
ibid.
367
ibid.
368
ibid.
369
https://myactivity.google.com/page?utm_source=my-activity&page=play_library. Note: visit using a personal Google Account. Some settings or text
may not be visible to Google Business Accounts.
370
ibid.
371
https://support.google.com/accounts/answer/27442. Note: visit using a personal Google Account. Some settings or text may not be visible to Google
Business Accounts.
372
ibid.
373
URL: https://support.google.com/accounts/answer/7673989. Note: visit using a personal Google Account. Some settings or text may not be visible to
Google Business Accounts.
374
ibid.
50
375
URL: https://policies.google.com/privacy#infocollect. Note: visit using a personal Google Account. Some settings or text may not be visible to Google
Business Accounts.
376
ibid.
377
ibid.
378
“YouTube ‘Not interested’feedback”in URL: https://myactivity.google.com/more-activity. Note: visit using a personal Google Account. Some settings
or text may not be visible to Google Business Accounts.
379
URL: https://support.google.com/youtube/answer/6125535. Note: visit using a personal Google Account. Some settings or text may not be visible to
Google Business Accounts.
380
URL: https://myactivity.google.com/page?utm_source=my-activity&page=news_preferences. Note: visit using a personal Google Account. Some
settings or text may not be visible to Google Business Accounts.
381
ibid.
382
ibid.
383
URL: https://myactivity.google.com/page?utm_source=my-activity&page=shopping_orders. Note: visit using a personal Google Account. Some settings
or text may not be visible to Google Business Accounts.
384
URL: https://support.google.com/googleshopping/answer/9116422
385
URL: https://myactivity.google.com/page?utm_source=my-activity&page=shopping_orders. Note: visit using a personal Google Account. Some settings
or text may not be visible to Google Business Accounts.
386
ibid.
387
URL: https://support.google.com/googleshopping/answer/9116422. Note: visit using a personal Google Account. Some settings or text may not be
visible to Google Business Accounts.
388
“Google Word Coach”in URL: https://myactivity.google.com/more-activity. Note: visit using a personal Google Account. Some settings or text may not
be visible to Google Business Accounts.
389
URL: https://support.google.com/accounts/answer/6139018. Note: visit using a personal Google Account. Some settings or text may not be visible to
Google Business Accounts.
390
ibid.
391
“Clear not interested feedback”in URL: https://support.google.com/youtube/answer/6125535. Note: visit using a personal Google Account. Some
settings or text may not be visible to Google Business Accounts.
392
“Include Chrome history and activity from sites, apps and devices that use Google services”(once clicked) in URL:
https://myaccount.google.com/activitycontrols. Note: visit using a personal Google Account. Some settings or text may not be visible to Google
Business Accounts.
393
ibid.
394
ibid.
51
395
ibid.
396
“Location History”(once clicked) in URL: https://myaccount.google.com/activitycontrols. Note: visit using a personal Google Account. Some settings or
text may not be visible to Google Business Accounts.
397
ibid.
398
ibid.
399
ibid.
400
ibid.
401
ibid.
402
ibid.
403
ibid.
404
“YouTube Search History”in “Privacy Checkup”URL: https://myaccount.google.com/privacycheckup. Note: visit using a personal Google Account.
Some settings or text may not be visible to Google Business Accounts.
405
URL: https://support.google.com/accounts/answer/6139018?hl=en&ref_topic=7188674. Note: visit using a personal Google Account. Some settings or
text may not be visible to Google Business Accounts.
406
URL: https://safety.google/privacy/data/
407
URL: https://support.google.com/accounts/answer/6139018. Note: visit using a personal Google Account. Some settings or text may not be visible to
Google Business Accounts.
408
ibid.
409
ibid.
410
ibid.
411
ibid.
412
“Google Location History”in URL: https://policies.google.com/technologies/location-data. Note: visit using a personal Google Account. Some settings
or text may not be visible to Google Business Accounts.
413
See location data collection methods at URL: https://policies.google.com/technologies/location-data#how-find. Note: visit using a personal Google
Account. Some settings or text may not be visible to Google Business Accounts.
414
“What happens after you delete some or all Location History”in URL: https://support.google.com/accounts/answer/3118687. Note: visit using a
personal Google Account. Some settings or text may not be visible to Google Business Accounts.
415
ibid.
416
URL: https://policies.google.com/privacy#footnote-unique-id. Note: visit using a personal Google Account. Some settings or text may not be visible to
Google Business Accounts.
417
ibid.
52
418
URL: https://policies.google.com/technologies/types. Note: visit using a personal Google Account. Some settings or text may not be visible to Google
Business Accounts.
419
ibid.
420
“YouTube History”(once clicked) in URL: https://myaccount.google.com/activitycontrols. Note: visit using a personal Google Account. Some settings or
text may not be visible to Google Business Accounts.
421
ibid.
422
ibid.
423
ibid.
424
“YouTube Watch History”in “Privacy Checkup”URL: https://myaccount.google.com/privacycheckup. Note: visit using a personal Google Account. Some
settings or text may not be visible to Google Business Accounts.
425
URL: https://support.google.com/accounts/answer/6139018. Note: visit using a personal Google Account. Some settings or text may not be visible to
Google Business Accounts.
426
ibid.
427
URL: https://policies.google.com/privacy#footnote-phone-number and URL: https://support.google.com/accounts/answer/3113316. Note: visit using a
personal Google Account. Some settings or text may not be visible to Google Business Accounts.
428
ibid.
429
URL: https://policies.google.com/privacy#footnote-deliver-services. Note: visit using a personal Google Account. Some settings or text may not be
visible to Google Business Accounts.
430
URL: https://myactivity.google.com/page?utm_source=my-activity&page=podcast_subscriptions. Note: visit using a personal Google Account. Some
settings or text may not be visible to Google Business Accounts.
431
URL: https://www.google.com/chrome/privacy/whitepaper.html#omnibox
432
ibid.
433
ibid.
434
ibid.
435
URL: https://www.google.com/chrome/privacy/whitepaper.html#searchlocale
436
ibid.
437
URL: https://www.google.com/chrome/privacy/whitepaper.html#tap
438
ibid.
439
ibid.
440
ibid.
441
ibid.
442
ibid.
53
443
URL: https://support.google.com/accounts/answer/6139018. Note: visit using a personal Google Account. Some settings or text may not be visible to
Google Business Accounts.
444
ibid.
445
Google’s submission responding to questions for the record from US Congress Judiciary Subcommittee on Antitrust, Commercial, and Administrative
Law, hearing on “Online platforms and market power, part 2”, 16 July 2019 (URL: https://docs.house.gov/meetings/JU/JU05/20190716/109793/HHRG-
116-JU05-20190716-SD030.pdf), p. 4.
446
URL: https://policies.google.com/privacy#whycollect. Note: visit using a personal Google Account. Some settings or text may not be visible to Google
Business Accounts.
447
ibid.
448
“Web & App Activity “in URL: https://policies.google.com/technologies/location-data. Note: visit using a personal Google Account. Some settings or
text may not be visible to Google Business Accounts.
449
ibid.
450
ibid.
451
ibid.
452
ibid.
453
URL: https://support.google.com/websearch/answer/1710607. Note: visit using a personal Google Account. Some settings or text may not be visible to
Google Business Accounts.
454
ibid.
455
URL: https://safety.google/privacy/data/. Note: visit using a personal Google Account. Some settings or text may not be visible to Google Business
Accounts.
456
ibid.
457
ibid.
458
URL: https://policies.google.com/privacy#whycollect. Note: visit using a personal Google Account. Some settings or text may not be visible to Google
Business Accounts.
459
ibid.
460
URL: https://policies.google.com/privacy#footnote-customized-search. Note: visit using a personal Google Account. Some settings or text may not be
visible to Google Business Accounts.
461
“Include your searches on YouTube”(once clicked) in URL: https://myaccount.google.com/activitycontrols. Note: visit using a personal Google Account.
Some settings or text may not be visible to Google Business Accounts.
462
ibid.
463
ibid.
464
ibid.
54
465
“Include the YouTube videos that you watch”(once clicked) in URL: https://myaccount.google.com/activitycontrols. Note: visit using a personal Google
Account. Some settings or text may not be visible to Google Business Accounts.
466
ibid.
467
“Include the YouTube videos that you watch”(once clicked) in URL: https://myaccount.google.com/activitycontrols. Note: visit using a personal Google
Account. Some settings or text may not be visible to Google Business Accounts.
468
ibid.
469
“YouTube Search History”in “Privacy Checkup”URL: https://myaccount.google.com/privacycheckup. Note: visit using a personal Google Account. Some
settings or text may not be visible to Google Business Accounts.
470
https://support.google.com/accounts/answer/6139018. Note: visit using a personal Google Account. Some settings or text may not be visible to Google
Business Accounts.
471
URL: https://safety.google/privacy/data/. Note: visit using a personal Google Account. Some settings or text may not be visible to Google Business
Accounts.
472
ibid.
473
ibid.
474
ibid.
475
“Product price tracking”in URL: https://myactivity.google.com/more-activity. Note: visit using a personal Google Account. Some settings or text may
not be visible to Google Business Accounts.
476
URL: https://myactivity.google.com/page?utm_source=my-activity&page=stadia_store. Note: visit using a personal Google Account. Some settings or
text may not be visible to Google Business Accounts.
477
ibid.
478
URL: https://policies.google.com/privacy#footnote-deliver-services. Note: visit using a personal Google Account. Some settings or text may not be
visible to Google Business Accounts.
479
ibid.
480
URL: https://policies.google.com/privacy#footnote-payment-info. Note: visit using a personal Google Account. Some settings or text may not be visible
to Google Business Accounts.
481
ibid.
482
ibid.
483
URL: https://policies.google.com/privacy#footnote-safety-reliability. Note: visit using a personal Google Account. Some settings or text may not be
visible to Google Business Accounts.
484
ibid.
485
URL: https://www.google.com/chrome/privacy/whitepaper.html#translate
486
ibid.
55
487
URL: https://www.google.com/chrome/privacy/whitepaper.html#omnibox
488
ibid.
489
URL: https://policies.google.com/technologies/partner-sites. Note: visit using a personal Google Account. Some settings or text may not be visible to
Google Business Accounts.
490
ibid.
491
URL: https://support.google.com/accounts/answer/3463280. Note: visit using a personal Google Account. Some settings or text may not be visible to
Google Business Accounts.
492
ibid.
493
ibid.
494
“Google Location History”in URL: https://policies.google.com/technologies/location-data. Note: visit using a personal Google Account. Some settings
or text may not be visible to Google Business Accounts.
495
See location data collection methods at URL: https://policies.google.com/technologies/location-data#how-find. Note: visit using a personal Google
Account. Some settings or text may not be visible to Google Business Accounts.
496
URL: https://policies.google.com/privacy#whycollect. Note: visit using a personal Google Account. Some settings or text may not be visible to Google
Business Accounts.
497
“Your location information”in URL: https://policies.google.com/privacy#infocollect. Note: visit using a personal Google Account. Some settings or text
may not be visible to Google Business Accounts.
498
URL: https://consent.google.com/privacyreminder/signedin. Note: visit using a personal Google Account. Some settings or text may not be visible to
Google Business Accounts.
499
URL: https://safety.google/privacy/data/. Note: visit using a personal Google Account. Some settings or text may not be visible to Google Business
Accounts.
500
ibid.
501
ibid.
502
“Google Assistant routines”in URL: https://myactivity.google.com/more-activity. Note: visit using a personal Google Account. Some settings or text
may not be visible to Google Business Accounts.
503
URL: https://myaccount.google.com/shared-endorsements. Note: visit using a personal Google Account. Some settings or text may not be visible to
Google Business Accounts.
504
URL: https://myaccount.google.com/u/1/shared-endorsements. Note: visit using a personal Google Account. Some settings or text may not be visible to
Google Business Accounts.
505
URL: https://support.google.com/accounts/answer/3403513. Note: visit using a personal Google Account. Some settings or text may not be visible to
Google Business Accounts.
56
506
URL: https://policies.google.com/privacy#footnote-payment-info. Note: visit using a personal Google Account. Some settings or text may not be visible
to Google Business Accounts.
507
ibid.
508
URL: https://support.google.com/accounts/answer/1333913. Note: visit using a personal Google Account. Some settings or text may not be visible to
Google Business Accounts.
509
ibid.
510
URL: https://www.google.com/chrome/privacy/whitepaper.html#tap
511
ibid.
512
ibid.
513
URL: https://myactivity.google.com/page?utm_source=my-activity&page=match_enrollment. Note: visit using a personal Google Account. Some
settings or text may not be visible to Google Business Accounts.
514
ibid.
515
“Voice and Face Match enrolment”in URL: https://myactivity.google.com/more-activity. Note: visit using a personal Google Account. Some settings or
text may not be visible to Google Business Accounts.
516
ibid.
517
“Include voice and audio recordings”(once clicked) in URL: https://myaccount.google.com/activitycontrols. Note: visit using a personal Google Account.
Some settings or text may not be visible to Google Business Accounts.
518
ibid.
519
ibid.
520
ibid.
521
ibid.
522
URL: https://www.google.com/chrome/privacy/whitepaper.html#signin. Note: visit using a personal Google Account. Some settings or text may not be
visible to Google Business Accounts.
523
ibid.
524
ibid.
525
ibid.
526
ibid.
527
ibid.
528
ibid.
529
ibid.
530
URL: https://policies.google.com/privacy#footnote-deliver-services. Note: visit using a personal Google Account. Some settings or text may not be
visible to Google Business Accounts.
57
531
Google’s submission responding to questions for the record from US Congress Judiciary Subcommittee on Antitrust, Commercial, and Administrative
Law, hearing on “Online platforms and market power, part 2”, 16 July 2019 (URL: https://docs.house.gov/meetings/JU/JU05/20190716/109793/HHRG-
116-JU05-20190716-SD030.pdf), p. 76.
532
URL: https://policies.google.com/privacy#footnote-phone-number. Note: visit using a personal Google Account. Some settings or text may not be
visible to Google Business Accounts.
533
ibid.
534
Google’s submission responding to questions for the record from US Congress Judiciary Subcommittee on Antitrust, Commercial, and Administrative
Law, hearing on “Online platforms and market power, part 2”, 16 July 2019 (URL: https://docs.house.gov/meetings/JU/JU05/20190716/109793/HHRG-
116-JU05-20190716-SD030.pdf), p. 76.
535
URL: https://policies.google.com/technologies/types. Note: visit using a personal Google Account. Some settings or text may not be visible to Google
Business Accounts.
536
ibid.
537
ibid.
538
ibid.
539
URL: https://support.google.com/accounts/answer/7673989. Note: visit using a personal Google Account. Some settings or text may not be visible to
Google Business Accounts.
540
ibid.
541
ibid.
542
URL: https://www.google.com/chrome/privacy/whitepaper.html#usagestats
543
ibid.
544
ibid.
545
ibid.
546
ibid.
547
URL: https://www.google.com/chrome/privacy/whitepaper.html#signin
548
ibid.
549
ibid.
550
URL: https://policies.google.com/technologies/partner-sites?hl=en. Note: visit using a personal Google Account. Some settings or text may not be
visible to Google Business Accounts.
551
URL: https://policies.google.com/technologies/partner-sites?hl=en. Note: visit using a personal Google Account. Some settings or text may not be
visible to Google Business Accounts.
552
URL: https://policies.google.com/privacy#enforcement. Note: visit using a personal Google Account from within the European Economic Area. Some
settings or text may not be visible to Google Business Accounts.
58
553
URL: https://policies.google.com/privacy#whycollect. Note: visit using a personal Google Account. Some settings or text may not be visible to Google
Business Accounts.
554
ibid.
555
ibid.
556
ibid.
557
ibid.
558
“YouTube survey answers”in URL: https://myactivity.google.com/more-activity. Note: visit using a personal Google Account. Some settings or text may
not be visible to Google Business Accounts.
559
ibid.
560
“Also use your activity & information from Google services to personalize ads on websites and apps that partner with Google to show ads. This stores
data from websites and apps that partner with Google in your Google Account.”(when clicked) in URL:
https://adssettings.google.com/authenticated?hl=en. Note: visit using a personal Google Account. Some settings or text may not be visible to Google
Business Accounts.
561
ibid.
562
Google’s submission responding to questions for the record from US Congress Judiciary Subcommittee on Antitrust, Commercial, and Administrative
Law, hearing on “Online platforms and market power, part 2”, 16 July 2019 (URL: https://docs.house.gov/meetings/JU/JU05/20190716/109793/HHRG-
116-JU05-20190716-SD030.pdf), pp. 96-97.
563
ibid.
564
ibid.
565
URL: https://support.google.com/accounts/answer/6078260. Note: visit using a personal Google Account. Some settings or text may not be visible to
Google Business Accounts.
566
ibid.
567
ibid.
568
ibid.
569
Your location information in URL: https://policies.google.com/privacy#infocollect. Note: visit using a personal Google Account. Some settings or text
may not be visible to Google Business Accounts.
570
ibid.
571
URL: https://myaccount.google.com/privacycheckup. Note: visit using a personal Google Account. Some settings or text may not be visible to Google
Business Accounts.
572
ibid.
573
URL: https://support.google.com/websearch/answer/6030020. Note: visit using a personal Google Account. Some settings or text may not be visible to
Google Business Accounts.
59
574
ibid.
575
ibid.
576
See URL: https://support.google.com/gboard/answer/9334583. Note: visit using a personal Google Account. Some settings or text may not be visible to
Google Business Accounts.
577
Your location information in URL: https://policies.google.com/privacy#infocollect. Note: visit using a personal Google Account. Some settings or text
may not be visible to Google Business Accounts.
578
ibid.
579
ibid.