# Google Search privacy rating

Google's web search engine. Searches are linked to accounts, cookies and devices to personalize results and ads.

## Summary

Google Search scores 25 out of 100 (grade F) on the search engines criteria. It meets 2 of 11 criteria: transparency report and tells users about requests. It partly meets TLS configuration, no profile-based ads and no account needed. It does not meet open source, no trackers or telemetry, no ads or data sales, independent audit, security headers and no search history logs. It is based in the United States: Five Eyes member; subject to the US CLOUD Act. Automated tests: SSL Labs grade B and Mozilla HTTP Observatory grade C.

- Website: https://www.google.com
- Jurisdiction: United States. Five Eyes member. Subject to the US CLOUD Act.
- Home page trackers: none found
- Category: [Search engines](https://privacyratings.com/search-engines/)
- Also rated: [Gmail](https://privacyratings.com/email-providers/gmail/) (Email providers), [Gmail app](https://privacyratings.com/email-clients/gmail-app/) (Email clients), [Google Takeout](https://privacyratings.com/email-backup/google-takeout/) (Email backup tools), [Google Chrome](https://privacyratings.com/browsers/google-chrome/) (Browsers), [Google Authenticator](https://privacyratings.com/two-factor-authentication/google-authenticator/) (Two-factor authentication), [Google Messages](https://privacyratings.com/messengers/google-messages/) (Messengers), [Google Meet](https://privacyratings.com/video-calls/google-meet/) (Video calls), [Google Voice](https://privacyratings.com/virtual-phone-numbers/google-voice/) (Virtual phone numbers), [Google Public DNS](https://privacyratings.com/dns-resolvers/google-public-dns/) (DNS resolvers), [Google Cloud](https://privacyratings.com/server-hosting/google-cloud/) (Server hosting), [Chrome Remote Desktop](https://privacyratings.com/remote-desktop/chrome-remote-desktop/) (Remote desktop), [Google Keep](https://privacyratings.com/notes/google-keep/) (Notes), [Google Calendar](https://privacyratings.com/calendars/google-calendar/) (Calendars), [Google Docs](https://privacyratings.com/office-suites/google-docs/) (Office suites), [Google Forms](https://privacyratings.com/forms/google-forms/) (Forms and surveys), [Google Translate](https://privacyratings.com/translation/google-translate/) (Translation), [Google Gemini](https://privacyratings.com/ai-assistants/google-gemini/) (AI assistants), [Google Drive](https://privacyratings.com/cloud-storage/google-drive/) (Encrypted cloud storage), [Google Maps](https://privacyratings.com/maps/google-maps/) (Maps and navigation), [Google Analytics](https://privacyratings.com/web-analytics/google-analytics/) (Website analytics), [Google Home](https://privacyratings.com/smart-home/google-home/) (Smart home), [Google Nest Cam](https://privacyratings.com/security-cameras/google-nest-cam/) (Security cameras), [Fitbit](https://privacyratings.com/wearables/fitbit/) (Wearables and health), [Google Fit](https://privacyratings.com/fitness-trackers/google-fit/) (Fitness trackers), [Google Photos](https://privacyratings.com/photo-management/google-photos/) (Photo management)
- Grade: F (25/100)

## Criteria

| Criterion | Answer | Note | Evidence |
| --- | --- | --- | --- |
| Open source | No | Closed source. |  |
| No trackers or telemetry | No | Search activity is collected with cookie, device and account identifiers for personalization and ads, and this cannot be fully turned off. | https://policies.google.com/privacy |
| No ads or data sales | No | Funded by advertising. | https://policies.google.com/privacy |
| Independent audit | No | No independent audit is published. |  |
| Transparency report | Yes | Google publishes counts of government requests for user data and how it responds, updated twice a year. | https://transparencyreport.google.com/user-data/overview |
| Tells users about requests | Yes | Google emails the user before disclosing data in response to a government request, unless prohibited by law. | https://policies.google.com/terms/information-requests |
| TLS configuration | Partial | Grade B | https://www.ssllabs.com/ssltest/analyze.html?d=www.google.com&hideResults=on |
| Security headers | No | Grade C (55/100+) | https://developer.mozilla.org/en-US/observatory/analyze?host=www.google.com |
| Modern web standards | Not tested yet | Not tested yet. |  |
| No search history logs | No | Searches are tied to accounts and cookies; server logs keep part of the IP address for 9 months and cookie data for 18 months. | https://policies.google.com/technologies/retention |
| No profile-based ads | Partial | Personalized ads are on by default and can be turned off in Google account settings. | https://policies.google.com/privacy |
| No account needed | Partial | Search works without an account; saved history and some personalized features need a Google account. | https://policies.google.com/privacy |

Source: https://privacyratings.com/search-engines/google-search/
Edit: https://github.com/privacyratings/privacyratings.com/edit/main/ratings/search-engines/google-search.md