Requirements
Privacy policy for Google Play apps: is it required, and where and how do you add it?
To publish an app on Google Play, you need to enter a privacy policy URL in Play Console. We cover whether apps that don't handle personal data need one, when you must link it in your store listing and inside the app, what the URL must meet, and where to enter it in Play Console.
Last checked Oct 14, 2026.
1. Is it required? Yes, for every app
The Play Console Help Center says that even apps that don't access any personal or sensitive user data must submit a privacy policy. Even if your app has no sign-in and stores nothing, you need to add a policy URL in Play Console.
The privacy policy is one of the app content items in Play Console, so your app setup isn't complete without it. You can only use closed testing once your app setup is complete, which makes it one of the first things to prepare when you release (How to publish an app on Google Play, and what it costs).
2. Where to link it
- Every app — enter the URL in the Privacy policy section of Play Console.
- Apps that access sensitive permissions or data — in addition, show the policy link on the store listing page and inside the app. Apps that use permissions such as location, contacts, or camera may fall into this group.
- Apps that target children — whether or not they use sensitive data, show the link on the store listing page and inside the app.
3. What the URL must meet
The documentation sets three conditions.
- It must be an active URL that actually opens. Documents that require sign-in, pages that were made private, and deleted blog posts don't work.
- It must apply to that app. A policy for your company's other services or one that names a different app doesn't qualify.
- It must comprehensively address user privacy. It should cover what data you collect and why, and how you store and handle it.
4. Where to add it in Play Console
- In Play Console, go to Policy and programs → App content.
- In the Privacy policy section, click Start (or Manage if you've already added one).
- Enter the web address where your policy is hosted and save.
Besides the privacy policy, App content includes items such as app access, ads, content ratings, target audience, and data safety. Make sure what your policy says is consistent with your answers in the Data safety form. If your app requires sign-in, also fill out App access so reviewers can get into your app.
If missing app content items are dragging out your closed testing review, see When your closed test is stuck in review for what to check.
Frequently asked questions
- Does an app that collects no personal data still need a privacy policy?
- Yes. Google's documentation says that even apps that don't access any personal or sensitive user data must submit a privacy policy. If you don't collect anything, say so in your policy.
- Where should I host my privacy policy?
- Any web address that anyone can open will do. If your app has a website, create a page there; if not, a public web document or blog post works. Avoid places that require sign-in or where the URL changes often.
- Do I also need a link inside the app?
- Apps that access sensitive permissions or data, and apps that target children, must show the link both on the store listing page and inside the app. Many apps put it on a settings screen.
- Can I copy another app's policy?
- Google's documentation says the policy must apply to your app and must comprehensively address user privacy. A policy that still mentions another app's name or lists data you don't actually collect doesn't qualify. Rewrite it based on the data your app actually collects.
Meet the requirement without recruiting testers
DUIRE joins your closed test with real Android devices and opens your app every day for 14 days. Registering your app and checking installability are free.