What does Google collect when you search?
Every query you type into Google Search is logged. That's not surprising. What is surprising is the granularity: Google records not just the words you searched, but which results you clicked, how long you spent on each result, the time and date of the search, the device you used, and your approximate location at the time.
Over years, this builds something more revealing than a diary. People search for things they wouldn't say out loud -- symptoms they're worried about, relationship problems, financial stress, political opinions they're testing out. Google doesn't need to guess at your health concerns, your income bracket, or your beliefs. It has the raw searches, typed at 2am when you thought no one was paying attention.
This data is tied to your Google account if you're signed in, which most people are by default on Chrome and Android. Even signed out, Google links searches to a cookie identifier stored in your browser, which persists across sessions until you clear it.
What does Google know about your browsing beyond Google.com?
This is where the scale becomes genuinely hard to grasp. Google Analytics is installed on approximately 80-85% of the top websites on the internet. When you visit any site running GA -- an online shop, a news site, a local business -- Google's script fires in the background and records the visit: the page you loaded, what you did there, how long you stayed, and where you went next.
Then there's the ad network. Google Ads (which absorbed DoubleClick's display network) shows banner and display ads across huge swaths of the web, including on sites that have nothing to do with Google. Each ad impression is a data point. Each click is a stronger one. The ad network knows what topics you engage with, which products you look at, and which categories of sites you frequent.
In practical terms: if you browse the open web, Google sees most of it. Not just when you're using Google Search or YouTube, but on third-party sites you'd never associate with Google at all.
What does Google know about where you are and where you go?
If you use Google Maps or carry an Android phone, Google has a detailed location history. "Detailed" is an understatement. Location History stores GPS-precise coordinates with timestamps, building a timeline of everywhere you've physically been.
From this, Google can infer: where you live (the address your phone sleeps at overnight), where you work (where it sits during the day), which doctors and clinics you visit, which places of worship you attend, which bars or restaurants you frequent, and who you meet -- if their Android phone is nearby at the same times and places.
The common assumption is that turning off Location History stops this. It doesn't, entirely. Google continues to collect location information through IP addresses, nearby Wi-Fi networks, and cell tower signals, even when the explicit Location History feature is disabled. Google's own support documentation acknowledges this. The feature toggle controls what gets stored in your timeline view -- not what Google collects.
What else does Google collect that people don't think about?
The search and location data tends to get the headlines, but Google's collection extends across every product it offers.
Gmail: Google scans the content of your emails for spam filtering, phishing detection, and smart features like Smart Reply and event detection. Since 2017, Google has said it no longer uses Gmail content for ad targeting. That doesn't mean the scanning stopped -- it means the stated use changed. The data still exists and is processed on Google's infrastructure.
YouTube: Every video you watch, pause, replay, or search for is logged. YouTube's watch history is one of the more intimate datasets Google holds, because what people watch voluntarily -- and especially what they rewatch -- reveals a lot about their actual interests versus their performed ones.
Google Drive and Docs: Documents, spreadsheets, and files you create and store are on Google's servers. Google scans these for spam and abuse detection. The content exists on infrastructure Google controls.
Google Calendar: Your schedule, commitments, and recurring events. Combined with location data, this allows Google to anticipate where you'll be before you get there -- which is genuinely useful for navigation, and genuinely useful for building a predictive profile.
Chrome: If you use Chrome with sync enabled, your full browsing history, bookmarks, saved passwords, and form data are stored in your Google account. This includes sites visited across every device where Chrome is signed in.
Android: App usage patterns, contact lists, and call logs can be collected depending on app permissions and your settings. Every Android device is signed into a Google account by default.
How can you actually see what Google has on you?
Go to myaccount.google.com and open "Data and Privacy." This is Google's own interface for reviewing and managing the data they hold.
The most useful sections are:
My Activity: A chronological log of your Google interactions -- searches, YouTube views, Maps queries, Assistant requests. It's searchable by date and by product. Most people who open this for the first time find it more detailed than they expected.
Location History: If enabled, this shows a map timeline of where your devices have been. You can zoom into specific days and see time-stamped location points.
Ad Settings: This page shows the interest categories Google has inferred about you. These often include topics like "parenting," "investing," "health conditions," or specific political and lifestyle categories. It's one of the clearer windows into how Google's profiling actually works in practice.
Google Takeout: At takeout.google.com, you can request a download of everything Google holds -- across every product. The resulting archive is typically large, and the Search history file in particular tends to be unsettling in volume.
Can you delete what Google has collected?
Partially. Google lets you delete My Activity, turn off Web and App Activity for future collection, remove Location History, and download your data before deleting it. You can also opt out of ad personalisation, which tells Google not to use your data to target you with specific ads.
What you cannot do is opt out of data collection entirely while continuing to use Google products. Even with every privacy toggle set to the most restrictive option, Google will collect some behavioural data as part of delivering the service. The toggles control how that data is used and how long it is retained -- not whether collection happens at all.
To genuinely reduce Google's data collection, you need to use alternatives. For search, DuckDuckGo and Brave Search don't build profiles. For email, Protonmail doesn't scan your messages. And for website analytics -- if you run a site -- tools like TrackTrendy collect visitor data without routing it through Google's infrastructure at all, which means your visitors don't get silently added to Google's ad profiles just by landing on your page.
Why does this matter if you run a website?
If you have Google Analytics installed, you are actively extending Google's data collection to your visitors. Every person who lands on your site and triggers the GA script becomes a data point in Google's system -- their visit, their device, their referrer, their behaviour on your pages. They almost certainly don't know this is happening, because most sites don't make it clear.
This isn't just an ethics question. Several EU data protection authorities -- including those in Austria, France, Italy, and Denmark -- have ruled that using Google Analytics without additional safeguards violates GDPR, because visitor data is transferred to Google's US servers without adequate legal protection. The Schrems II ruling from 2020 is the legal backdrop here, and regulators have been applying it to Google Analytics specifically since 2022.
The practical alternative is analytics tools that don't send your visitors' data to Google at all. TrackTrendy, for example, collects the same basic metrics -- traffic, referrers, page performance, device types -- without a single byte going to Google. Your visitors' behaviour stays between you and your analytics dashboard, not you, your analytics dashboard, and Google's ad network.