Privacy Policy for Google AdSense in 2026 — What You Need

If you're applying for Google AdSense or already running ads on your site, a privacy policy isn't optional — it's a hard requirement. Google will reject your AdSense application without one, and your account can be suspended if your policy doesn't meet their standards. Here's exactly what you need in 2026.

Why Google AdSense requires a privacy policy

Google AdSense serves personalized ads using cookies and tracking technologies. When someone visits your site, AdSense sets cookies, reads browsing data, and uses that information to show relevant ads. Under GDPR, CCPA, and Google's own policies, your visitors must be informed about this data collection.

Your privacy policy is how you disclose this. Without it, you're violating Google's AdSense Program Policies — which can result in application rejection, ad serving being paused, or account termination.

What your AdSense privacy policy must include

• ✓
  Disclosure that you use Google AdSense — Explicitly name Google AdSense as an advertising partner on your site. Something like: "We use Google AdSense to display advertisements. Google uses cookies to serve ads based on your visits to this and other websites."
• ✓
  Cookie disclosure — Explain that AdSense uses cookies and similar tracking technologies to serve personalized ads. Describe what a cookie is and how visitors can opt out.
• ✓
  Link to Google's privacy policy — Include a link to Google's own privacy policy: policies.google.com/privacy. Google requires this in their publisher policies.
• ✓
  How to opt out of personalized ads — Tell visitors they can opt out of personalized advertising at Google's Ad Settings page or by visiting aboutads.info. This is required by Google's policies.
• ✓
  What data is collected — General disclosure that your site collects data including IP addresses, browsing behavior, and device information through advertising and analytics tools.
• ✓
  Third-party advertising disclosure — State that third-party vendors, including Google, use cookies to serve ads based on prior visits to your website and other websites on the internet.
• ✓
  GDPR section (if you have EU visitors) — Legal basis for processing, user rights (access, deletion, opt-out), and contact information for data requests.
• ✓
  CCPA section (if you have California visitors) — Categories of data collected, disclosure that data may be shared with advertising partners, and how California residents can opt out.

Where to put your privacy policy for AdSense approval

Google checks that your privacy policy is easy to find. Follow these placement rules to avoid rejection:

• Footer link on every page — A "Privacy Policy" link in your site footer is the minimum. Google's reviewers look here first.
• Accessible without login — Your policy must be publicly accessible. If it's behind a login wall, Google can't verify it exists.
• Clear and readable URL — yoursite.com/privacy or yoursite.com/privacy-policy are ideal. Avoid obscure URLs like yoursite.com/legal/documents/pp-v2.
• Not buried in other content — Your policy should be a standalone page, not buried in a Terms of Service document or FAQ.

AdSense privacy policy and GDPR — the EU consent requirement

If any of your visitors are based in the EU — and if your site is publicly accessible, some almost certainly are — Google's EU User Consent Policy applies on top of standard AdSense requirements.

This means you need:

1. A privacy policy that discloses Google AdSense and cookie usage (covered by PolicyFlyer)
2. A cookie consent banner that gets active opt-in consent before AdSense cookies are set
3. Google's Consent Mode implemented so AdSense works correctly with consent signals

For the cookie consent banner, CookieYes and Complianz both have free plans and integrate with Google Consent Mode. Install one alongside your privacy policy for full EU compliance.

Common reasons AdSense rejects privacy policies

• No mention of cookies or advertising — The most common reason. Your policy must specifically mention advertising cookies.
• No link to Google's privacy policy — Required by Google's publisher policies.
• Policy is too generic — Copy-pasted boilerplate that doesn't mention your actual site or Google AdSense specifically.
• Policy not linked from every page — Google checks that the policy is accessible site-wide, not just on one page.
• Policy URL returns a 404 — Make sure the page is published and accessible before submitting your AdSense application.
• Policy is in a different language than the site — Your privacy policy should be in the same language as your website content.

Step-by-step: getting AdSense approved with your privacy policy

1. Generate your policy — Use PolicyFlyer, enter "Google AdSense" and any other third-party tools in the services field.
2. Create a Privacy Policy page — Add a new page on your site at a clear URL like /privacy-policy.
3. Paste the generated policy — Copy the policy text into the page and publish it.
4. Add a footer link — Link to your privacy policy from the footer of every page on your site.
5. Install a cookie banner (if EU traffic) — CookieYes free plan works well.
6. Apply for AdSense — Go to adsense.google.com, add your site, and wait for review (usually 1–14 days).
7. If rejected — Check the rejection reason, update your policy accordingly, and resubmit.

Frequently asked questions