Google Play · Platform guide

Privacy policy for Android apps on Google Play

Google Play requires every app to link a privacy policy in Play Console and inside the app. The URL must be active, public, not geofenced, and not a PDF. Your policy must also be consistent with the Data safety section, which has to include data collected by third-party SDKs in your app.

§ 1

What Google Play requires

User Data policy — privacy policy

“Please make sure your privacy policy is available on an active, publicly accessible and non-geofenced URL (no PDFs) and is non-editable.”

Source: support.google.com verified 2026-10-29

1.1Linked in the listing and inside the app. Google’s key considerations: “Have a valid privacy policy in both the app’s store listing and within the app itself” and “Don’t provide misleading or inaccurate information about your data practices.” Source: support.google.com
1.2Data safety section includes SDK data. “All developers must declare how they collect and handle user data for the apps they publish on Google Play… This includes data collected and handled through any third-party libraries or SDKs used in your apps.” Source: support.google.com
1.3Where it lives in Play Console. Mandatory declarations are on the App content page (Monitor and improve › Policy and programs › App content). Source: support.google.com
§ 2

What common SDKs collect

SDK / APIData it collectsSource
Google Mobile Ads SDK (AdMob)
  • IP address
  • User product interactions
  • Diagnostic information
  • Device and account identifiers (including Android advertising ID)
Source: developers.google.com
Firebase Crashlytics
  • Crashlytics installation UUIDs
  • Firebase installation IDs
  • Crash traces
Source: firebase.google.com
Firebase Cloud Messaging
  • Firebase installation IDs (to route push messages to devices)
Source: firebase.google.com

Everything in this table must appear in your policy if the SDK ships in your build.

§ 3

Where to put the URL

  1. 3.1Play Console → your app → Policy and programs → App content → Privacy policy.
  2. 3.2Inside the app: a link from Settings or About that opens the same URL.
  3. 3.3Fill in Data safety from the same list of data, including every SDK.
§ 4

Sample clause

§ 4.1 · Advertising

This app shows ads through Google AdMob. The Google Mobile Ads SDK collects your IP address, interactions with ads, diagnostic information, and device identifiers such as the Android advertising ID, for advertising, analytics, and fraud prevention. You can reset or delete your advertising ID in your device settings.

Illustrative wording. Your generated policy is written from your own answers.
§ 5

Questions

Does Google Play accept a PDF privacy policy?
No. Google’s User Data policy asks for an active, publicly accessible, non-geofenced URL and says “no PDFs”.
Do I need a privacy policy if my Android app has no ads?
Google’s policy says that even apps that do not access personal or sensitive data must still submit a privacy policy.
How do I change my privacy policy URL?
Update it on the App content page in Play Console (Policy and programs › App content). Keep the in-app link pointing at the same page.