Google Analytics · Platform guide
Privacy policy for apps using analytics (GA4 and other SDKs)
Yes. Google Analytics’ terms say you must post a privacy policy that gives notice of cookies, mobile device identifiers or similar technology used to collect data, and you must disclose that you use Google Analytics and how it collects and processes data. Other analytics SDKs should be disclosed the same way.
What Google Analytics requires
Google Analytics Terms of Service — Privacy
“You must post a Privacy Policy and that Privacy Policy must provide notice of Your use of cookies, identifiers for mobile devices (e.g., Android Advertising Identifier or Advertising Identifier for iOS) or similar technology used to collect data.”
Source: marketingplatform.google.com verified 2026-10-30
What common SDKs collect
| SDK / API | Data it collects | Source |
|---|---|---|
| Google Analytics |
| Source: marketingplatform.google.com |
| Firebase Crashlytics |
| Source: firebase.google.com |
Everything in this table must appear in your policy if the SDK ships in your build.
Where to put the URL
- 3.1Your site footer or app Settings/About, plus every store listing.
- 3.2Near your cookie banner if you use one.
Sample clause
§ 4.1 · Analytics
We use Google Analytics to understand how people use our app. It uses cookies or your device’s advertising identifier to collect usage events such as screens viewed. See “How Google uses information from sites or apps that use our services”. You can opt out in Settings → Privacy.
Questions
- Do I need a privacy policy to use Google Analytics?
- Yes. The Google Analytics terms require you to post one that discloses cookies or identifiers and your use of Google Analytics.
- Do I need to name each analytics SDK?
- Naming each provider and what it collects is the clearest approach, and app stores ask about third-party code. This is not legal advice.