The Pulse
Google Policy Lets Connected Gmail Data Inform Search Ads
Google’s privacy policy, effective October 16, allows data from Gmail, Drive and Photos to inform personalized ads when users make it available to other Google services. Google says ads will not be based directly on inbox or photo-library c
AI.info Team · Written with AI · fact-checked ·
Google’s ad promise now has an exception
Google says it will not base ads directly on the contents of a user’s Gmail inbox or Google Photos library. But a privacy-policy update effective October 16 allows data from Gmail, Drive and Photos to inform ads when users choose to make that data available to other Google services that support ad personalization.
The change puts two positions in tension: Google maintains a boundary around direct use of inbox and photo contents, while its policy now describes a route for information shared across services to shape personalized content, including ads. The updated language does not say Google hands an inbox or photo library to advertisers. It does broaden the circumstances in which information from those services may influence what users see.
Sharing with Search changes the equation
The prior version said Google did not show personalized ads based on content from Drive, Gmail or Photos, without the new exception. The current policy adds that caveat and says users may allow services such as Search or Gemini Apps to access data from other Google services for a more personalized experience. It specifically says Search may process information users permit it to access to personalize content, including ads.
Google’s policy gives a hotel-booking example: if a user asks Search about a recent booking, the service may use details from an email to suggest activities near the hotel. That example describes personalization rather than an ad. Read alongside the policy’s ad language, however, it illustrates how information a user brings into Search could shape the context in which ads are selected.
Google says ads won’t use inbox contents directly
In a statement to Ars Technica, Google said connecting apps is optional and defended the distinction between direct use of private content and ads informed by a search interaction.
“Connecting your apps is entirely opt-in. Ads will continue to be relevant to things like your query, the context of the response and your interests. Ads will not be based directly on your Gmail inbox or Photos library, and as always, sensitive information will not be used to tailor ads.”
Google, in a statement to Ars Technica
Google also told Ars that the clarification does not change how it handles user data in relation to advertising partners. The company said it does not scan an entire inbox to build an advertising profile or give that data to third parties. The distinction leaves the central question at the service boundary: when users authorize data access for a personalized Google experience, which resulting context can also inform ads?
Users face separate choices about access and ads
Google’s policy says personalized ads will not be based on sensitive categories such as race, religion, sexual orientation or health. It also says the company does not share information that personally identifies a user, such as a name or email address, with advertisers unless the user asks it to. Those safeguards address sensitive traits and identity disclosure; they do not erase the policy’s new exception for data made available to other Google services.
Users can review ad preferences in My Ad Center and manage the information and personalization settings associated with their Google Account. Those choices matter because the policy’s exception depends on a user allowing data to be made available to another service that supports personalized ads. The practical change is narrow but consequential: Gmail, Drive and Photos remain outside direct ad targeting by default, while information deliberately carried into connected Google services may contribute to ad personalization there.