Privacy

The Complete Guide to Managing Your Google Privacy

KnytX builds privacy and security tools — data broker removal, dark-web monitoring, and scam defence. · What is KnytX?

··11 min read

What Google actually knows about you

Every search you’ve typed since you created your account. Every YouTube video you’ve watched, every query you’ve searched on it. Your location — everywhere your phone has been, including when you thought location was off. Your voice recordings from Google Assistant and every “OK Google” command you’ve ever said out loud. The contents of your Gmail. Every app you’ve installed on Android. Your contact list. Your calendar. Which ads you clicked last Tuesday.

Google is not trying to be the villain. It built the most useful set of tools in the history of consumer software. It paid for that by becoming the most comprehensive private data collector in human history. Over 4 billion people use Google products. Google My Activity (myactivity.google.com) holds a timestamped log of almost everything you’ve done across Search, Maps, YouTube, Chrome, and a dozen other services.

Your ad profile is worth visiting at least once. Google has inferred your approximate age, gender, household income bracket, relationship status, and a detailed list of your interests — parenting, technology, travel, fitness, financial services. You can see all of it. Most people have never looked.

This guide walks through each piece, where to find it, and what you can actually do about it.

The Google Account data dashboard

Open myaccount.google.com in a browser right now. This is the central hub for your Google data. Everything branches from here.

The four sections worth knowing:

My Activity links to myactivity.google.com — a full chronological log of your activity across Google services. Search queries, YouTube views, Maps navigation, Assistant commands. All of it, with timestamps. You can filter by product, search within it, and delete individual entries or everything. If you have had a Google account for more than a few years, the depth of this log is worth seeing at least once.

Data & Privacy is where activity controls live. You can pause or delete Web & App Activity, Location History, and YouTube History from one place. Auto-delete settings are here too. This is the section most worth spending time in.

Ad settings links to adssettings.google.com — your ad profile. This is the one most people skip. Don’t.

Privacy Checkup walks you through the major settings in a guided flow. If you want a structured review rather than clicking around, start here. It takes about five minutes and touches the most important controls: activity saving, location, ad personalization, and account sharing.

One thing to note before you start: some settings are account-level (they apply wherever you’re signed in) and some are device-level (set on each phone or computer separately). The dashboard covers the account-level settings. Device permissions — camera, microphone, location for specific apps — are handled on the device itself.

Search and YouTube history: how to manage it

Go to myactivity.google.com. By default, you’re looking at everything — searches, YouTube views, Maps lookups, app activity — in one combined feed.

To delete specific entries: click the three dots next to any item and select “Delete.” To delete everything: click “Delete” in the top menu, then “All time.”

The more useful option is Activity Controls — myaccount.google.com > Data & Privacy > Web & App Activity. Here you can:

  1. Pause Web & App Activity entirely (Google stops logging new activity)
  2. Enable auto-delete — set it to 3 months, 18 months, or 36 months

Auto-delete at 3 months is the right call for most people. Your recent search context still works; your history from years ago stops sitting in a database indefinitely.

One thing to be clear about: browsing in Incognito does not save to your Google account. But it does not hide your activity from Google’s servers when you use Google Search, from your internet service provider, or from your employer’s network. Incognito is account-isolation, not anonymity.

Location history: the one that surprises people

Go to maps.google.com/maps/timeline. This is Google’s Timeline — a map showing everywhere you’ve been, often with the names of places you visited, commute routes, and travel dates.

It is, for most people who have used Android for years, genuinely startling.

To delete location history: in Timeline settings, select “Delete all Location History.” To turn off new collection: Google Account > Data & Privacy > Location History — or on Android, Settings > Location > Google Location Accuracy (device-level).

Here’s the honest part: turning off Location History stops the Timeline. It does not stop Google from inferring your approximate location through your IP address, nearby Wi-Fi networks, and cell tower data. These signals feed into services like local search results and weather without requiring Location History to be on.

The setting matters and is worth changing. But “off” means Timeline stops — not that location becomes invisible.

One more thing worth doing: in Maps settings, you can delete specific days or trips from your Timeline rather than wiping the entire history. If you want to keep the useful parts (international trips you want to remember) while removing everyday commutes and sensitive locations, you can delete selectively. In Timeline, tap any day and hit the trash icon for that entry.

Gmail: what Google does with your email

Google stopped automatically scanning Gmail messages for ad targeting in 2017. The more immediate issue is third-party app access — the apps and services you’ve connected to your Gmail account over the years.

Go to myaccount.google.com > Security > Third-party apps with account access. You will almost certainly find apps you forgot about. A travel app from 2019. A newsletter tool. A job application service. A calendar integration that’s been reading your email for four years. Revoke anything you don’t actively use.

Third-party apps with Gmail access can read your email content. Many do. This is not theoretical — it’s the access you granted when you clicked “Sign in with Google” and approved mail permissions. A 2018 Wall Street Journal investigation found that hundreds of third-party app developers were reading Gmail messages. The permissions system hasn’t fundamentally changed since then.

Also in Gmail settings: Smart features. Gmail uses your email content to power Smart Reply, Smart Compose, and other inline suggestions. These features work by analyzing your incoming and outgoing messages. You can turn them off under Gmail Settings > General > Smart features and personalization > turn off. There’s a second toggle for stopping that data from being shared with other Google products — turn that off too.

Neither change affects the email you’ve already sent or received. They stop new content from being used going forward.

Your Google ad profile

Visit adssettings.google.com. Log in if you aren’t already.

You’ll see what Google believes about you: your estimated age range, gender, and a detailed list of interest categories it has inferred from your activity. Home improvement. Fitness. Travel. Financial planning. Business software. The list runs long.

You can edit any of these categories — click one and turn it off. You can also toggle Ad personalization entirely.

Be clear on what this does and doesn’t do: turning off ad personalization stops Google from using your stored data to target ads to you specifically. It does not stop Google from collecting your activity data. It does not make the ads disappear. You’ll still see ads — they’ll just be less specifically targeted because your profile isn’t being applied.

For some people this is the right trade. Know what you’re changing.

Android: the permissions audit

Open Settings > Privacy > Permission Manager on your Android device. This shows every permission category — camera, microphone, location, contacts, storage, phone — and which apps have access to each.

Do a pass through each category. Ask one question about each app listed: does this app actually need this permission to do its core function?

A flashlight app with microphone access: revoke. A food delivery app with contacts access: revoke. A game with location access set to “Always”: change to “Only while using” at minimum. A weather app that wants “precise” location when “approximate” location would serve it fine: downgrade it.

For location specifically, Android gives you three options for most apps: “Allow all the time,” “Only while using the app,” and “Don’t allow.” Set anything that doesn’t genuinely need background location to “Only while using the app.” That covers fitness trackers and maps apps while navigating. Background location access means the app can request your location even when it’s not open.

The Play Store’s Data safety section shows each app’s self-reported data collection practices — what data they collect, whether it’s shared with third parties, whether it’s used for tracking. Navigate to any app’s Play Store page and scroll to “Data safety.” The disclosures are self-reported, and Google does not independently verify them. Even so, they give you a baseline sense of what an app is doing with your information.

Do the permissions audit now. It takes 10 minutes and the changes take effect immediately. No reboot needed, no app reinstallation — the permissions are revoked the moment you change them.

Reducing your Google footprint without leaving Google

Most people will not leave Google. The ecosystem is genuinely useful and the switching cost is high — 1.8 billion Gmail users aren’t moving to Proton overnight. That’s fine. You can reduce your exposure significantly while staying inside Google’s products.

Practical steps that work:

  • Use DuckDuckGo (duckduckgo.com) or Brave Search (search.brave.com) for everyday browsing. Fall back to Google only when results are genuinely better. This keeps most of your search history out of your Google account entirely.
  • Sign out of your Google account when browsing sites unrelated to Google services. Google has tracking pixels and analytics scripts embedded across a large share of the web — being logged in means those touches get tied to your account profile.
  • Install uBlock Origin on Firefox. Google’s tracker network — Google Analytics, Google Tag Manager, DoubleClick — is embedded across millions of third-party sites. Blocking these scripts stops Google from building a profile of your off-Google browsing behavior.
  • Set Web & App Activity to auto-delete at 3 months. Pause Location History. These two changes alone shrink the amount of stored history significantly over time.
  • Review third-party app access to your Google account once a year. It takes five minutes. Revoke anything you don’t recognize or no longer use.

These are not dramatic changes. None of them require leaving Google’s ecosystem or switching browsers permanently. They meaningfully reduce the scope of what gets stored about you without disrupting how you work day to day.

If you want to leave Google

This is a bigger move and worth taking seriously before starting.

First: export your data. Google Takeout at takeout.google.com lets you download everything — Gmail, Drive, Photos, Contacts, Calendar, all of it. Do this before changing anything. The export can take hours for large accounts, but you’ll have your data.

Practical alternatives by category:

  • Email: Proton Mail (proton.me) — end-to-end encrypted, based in Switzerland, free tier available
  • Search: Brave Search (search.brave.com) or DuckDuckGo (duckduckgo.com) — no search history stored
  • Navigation: Apple Maps (iOS/macOS) or OsmAnd (Android/iOS, uses OpenStreetMap data)
  • Calendar: Proton Calendar — encrypted, integrates with Proton Mail
  • Cloud storage: Proton Drive or local storage with Syncthing

Switching email is the hardest part — you’ve used that Gmail address for years and it’s on thousands of accounts. The practical approach is to start a new email, update your most important accounts (banking, healthcare, primary services), and let the old Gmail account quietly drain over 6–12 months. Trying to switch everything in a week doesn’t work.

Google is not going anywhere. Leaving is one option. Reducing is another. Both are better than doing nothing.

One setting this guide doesn’t cover in depth: whether Google uses your Gemini conversations to train its AI. It does, by default, on personal accounts. Our guide to opting out of AI training shows exactly where to turn that off, along with the same setting at every other major company. And the personal details Google holds often show up on people-search brokers too, like Whitepages, which resell your name and address.

What you can do right now

Want to see what data brokers expose about you? See what a scan finds → shows an example report: the kinds of sites that list your name, phone, and address. Once KnytX Shield launches it will find and remove these automatically. Join the waitlist to get in early.

Share