{
  "slug": "google-analytics",
  "category": "web-analytics",
  "name": "Google Analytics",
  "description": "Google's web and app analytics service (GA4) that measures traffic, events and conversions, and connects with Google Ads for audiences and ad measurement.",
  "website": "https://marketingplatform.google.com/about/analytics/",
  "license": null,
  "platforms": [
    "web"
  ],
  "jurisdiction": {
    "code": "US",
    "name": "United States",
    "eyes": "Five Eyes",
    "eu": false,
    "gdpr": false,
    "cloud_act": "provider"
  },
  "pick": false,
  "pick_reason": null,
  "disclosure": null,
  "grade": "F",
  "score": 23,
  "coverage": 100,
  "summary": "Google Analytics scores 23 out of 100 (grade F) on the website analytics criteria. It meets 2 of 11 criteria: transparency report and tells users about requests. It partly meets independent audit and TLS configuration. It does not meet open source, no trackers or telemetry, no ads or data sales, security headers, no cookies, no personal data and self-hostable. It is based in the United States: Five Eyes member; subject to the US CLOUD Act. Automated tests: SSL Labs grade B and Mozilla HTTP Observatory grade C.",
  "url": "https://privacyratings.com/web-analytics/google-analytics/",
  "markdown": "https://privacyratings.com/web-analytics/google-analytics/index.md",
  "answers": {
    "open_source": {
      "title": "Open source",
      "weight": 3,
      "answer": "no",
      "evidence": null,
      "note": "Closed source."
    },
    "no_trackers": {
      "title": "No trackers or telemetry",
      "weight": 3,
      "answer": "no",
      "evidence": "https://policies.google.com/privacy",
      "note": "Google's websites and the Analytics site use Google's own advertising and analytics cookies."
    },
    "no_ads": {
      "title": "No ads or data sales",
      "weight": 2,
      "answer": "no",
      "evidence": "https://support.google.com/analytics/answer/1011397",
      "note": "Part of Google's advertising business. Analytics data can be shared with Google for its products and used with Google Ads for audiences and ad personalization."
    },
    "independent_audit": {
      "title": "Independent audit",
      "weight": 2,
      "answer": "partial",
      "evidence": "https://support.google.com/analytics/answer/6004245",
      "note": "Google Analytics is covered by Google's ISO 27001 certification, but no full audit report is public."
    },
    "transparency_report": {
      "title": "Transparency report",
      "weight": 2,
      "answer": "yes",
      "evidence": "https://transparencyreport.google.com/user-data/overview",
      "note": "Publishes counts of government requests for user data and how often data is disclosed, updated twice a year."
    },
    "user_notice": {
      "title": "Tells users about requests",
      "weight": 1,
      "answer": "yes",
      "evidence": "https://policies.google.com/terms/information-requests",
      "note": "Google emails the user before disclosing information unless legally prohibited or in emergencies."
    },
    "tls": {
      "title": "TLS configuration",
      "weight": 2,
      "answer": "partial",
      "evidence": "https://www.ssllabs.com/ssltest/analyze.html?d=analytics.google.com&hideResults=on",
      "note": "Grade B"
    },
    "security_headers": {
      "title": "Security headers",
      "weight": 1,
      "answer": "no",
      "evidence": "https://developer.mozilla.org/en-US/observatory/analyze?host=analytics.google.com",
      "note": "Grade C (55/100+)"
    },
    "web_standards": {
      "title": "Modern web standards",
      "weight": 1,
      "answer": "pending",
      "evidence": null,
      "note": "Not tested yet."
    },
    "no_cookies": {
      "title": "No cookies",
      "weight": 2,
      "answer": "no",
      "evidence": "https://support.google.com/analytics/answer/6004245",
      "note": "Uses first-party cookies on websites and app instance IDs in apps to identify users."
    },
    "no_personal_data": {
      "title": "No personal data",
      "weight": 3,
      "answer": "no",
      "evidence": "https://support.google.com/analytics/answer/6004245",
      "note": "IP addresses are not stored, but cookie and user identifiers are kept, and data can be used for advertising personalization."
    },
    "self_hostable": {
      "title": "Self-hostable",
      "weight": 1,
      "answer": "no",
      "evidence": null,
      "note": "Hosted only."
    }
  },
  "tests": {
    "ssllabs": "B",
    "observatory": "C",
    "internetnl_web": null,
    "internetnl_mail": null,
    "trackers": [
      {
        "name": "Google Fonts",
        "host": "fonts.googleapis.com",
        "effect": "none"
      },
      {
        "name": "Google Tag Manager",
        "host": "www.googletagmanager.com",
        "effect": "no"
      }
    ],
    "tested_at": "2026-10-01T06:59:45.544Z"
  },
  "last_modified": "2026-10-01T07:44:20Z"
}