Google expands ad data use to include Gmail and Photos content

What the new policy change means for users

Google announced that it will now analyse the content of Gmail messages and images stored in Google Photos to improve the relevance of ads shown across its services. The shift does not involve selling the data to third parties; instead, the information is processed internally to match users with advertisements that align with their interests.

Scope of data that can be scanned

The updated terms specify that the company may examine the text of emails, the subjects, and the attachments, as well as the visual content of photos and videos. Metadata such as timestamps and location tags are also included. Google states that the analysis is automated and that human reviewers do not access individual messages or photos.

How ads are selected

When a user opens a Gmail message or views a photo, the system can generate a profile of interests based on keywords, objects, and themes detected in the content. Advertisers then bid for the chance to display ads that correspond to those interests. The process is designed to happen in real time, meaning the ad shown reflects the most recent activity.

Text analysis extracts topics from email bodies.
Image recognition identifies objects, scenes, and activities.
Combined signals feed into Google’s ad auction platform.

Legal backdrop and regulatory response

The change arrives at a time when privacy regulators worldwide are scrutinising how tech firms handle personal information. In the United States, the Federal Trade Commission has issued guidance on data transparency and the need for clear consent mechanisms.

U.S. privacy framework

The FTC’s official guidance emphasises that companies must provide users with understandable choices about data use. Critics argue that the new policy does not offer a truly opt‑in model, as the default setting still permits data processing for ad purposes.

European Union considerations

Under the General Data Protection Regulation, any processing of personal data for marketing must be based on explicit consent. The European Commission’s Regulation text requires that consent be specific, informed, and freely given. Google has pledged to align its practices with the regulation, but privacy groups remain skeptical.

Google’s stated safeguards and user controls

Google says it has built several layers of protection to limit the exposure of personal content. Data is encrypted at rest and in transit, and the analysis is performed on anonymised signals whenever possible.

Opt out mechanisms

Users can disable ad personalisation for Gmail and Photos through the Google privacy settings page. The option is labelled as “Ad personalisation” and toggles off the use of content from those services for advertising. However, the setting does not stop Google from using other signals such as search history.

Data minimisation claims

Google asserts that it only retains the minimal amount of information needed to generate an ad. The company claims that raw email text and original photos are never stored after the analysis is complete, and that any derived signals are deleted after a short period.

Industry reaction and expert analysis

Privacy advocates have voiced strong concerns about the breadth of the data being examined. The Electronic Frontier Foundation described the move as “a step back for user privacy” and called for stricter oversight.

Privacy advocates’ concerns

Key points raised by watchdog groups include:

Potential for inadvertent exposure of sensitive personal information.
Difficulty for average users to understand the extent of data processing.
Risk that the policy could set a precedent for other platforms.

Advertiser perspective

Marketers welcome the ability to reach audiences with more precise signals. A spokesperson for a major advertising agency said that the new data sources could improve campaign performance and reduce wasted spend.

Nevertheless, the balance between commercial benefit and privacy protection remains a contentious issue. Ongoing legal challenges and possible legislative action could shape how the policy is implemented in the future.

Users who value privacy may wish to review their settings, consider alternative email providers, or limit the types of content stored in cloud services. As the debate evolves, the conversation highlights the growing tension between personalised advertising and the expectation of confidentiality for personal communications.