Internet Identity Privacy Policy
Effective Date: 2026-04-07
We, DFINITY Stiftung, Genferstrasse 11, 8002 Zürich, Switzerland (“DFINITY Foundation”) disclose in this Internet Identity Privacy Policy (“Privacy Policy”) how we process personal data when you link your Internet Identity account with your Google account.
This Privacy Policy does not apply to any other data processing, including, without limitation, personal data that we collect offline or via other websites that do not link to this Privacy Policy; data that plausible.io collects and process; data (namely OpenID credentials such as name and email address) that is shared with third party applications you use through Internet Identity’s integration with Google or other OpenID Connect providers; and personal data that you share with users of the Internet Computer, Internet Identity, or other blockchain-based technologies when you use such technologies.
No tracking, privacy-preserving authentication
Internet Identity is a decentralized authentication service that enables secure logins without passwords – it keeps users untraceable across applications. In most authentication services, like Google Sign In, all applications that integrate with it receive the same user email address. Therefore, if those authentication services publish or sell the data, aggregators can track user activity across multiple applications.
Internet Identity is different. It prevents this tracking by giving each application that integrates with it a different user identification. For example, if user A authenticates with app Z, the user id is 1; but if the same user A authenticates with app Y, the user id is 2. No two user ids are repeated.
Moreover, Internet Identity doesn’t use cookies. Therefore, there cannot be any tracking after you close the Internet Identity page.
Integration with Google
Internet Identity integrates with Google as an authentication method. However, Google will only learn that users logged in to Internet Identity, not to which application the user authenticated.
For example, user A logs into Internet Identity with their Google account “A@gmail.com” and then uses Internet Identity to authenticate in application Z. Google will never know that the user is authenticated in application Z, only in Internet Identity. Moreover, application Z will also never know that user A used Google to authenticate their Internet Identity user.
To provide this authentication service, Internet Identity stores the email address and name associated with the user’s Google account (e.g., A@gmail.com), but no other personal data. This data is necessary to keep track of which Google account was used by which user.
1. Data Categories Processed and Purposes of Use
We do not use cookies or collect any personal data in Internet Identity unless otherwise stated herein. Only the email address and name associated with the user’s Google account are stored in Internet Identity to provide (i) the functionality to log in using Google and (ii) the attributes requested by a third party application associated with the user’s Google account.
For our analytics, we use Plausible, which has its own data policy. We use analytics to understand the behavior of our aggregated users (not individuals) and track errors. The aggregated behavior and the errors are used to prioritize and guide us in building a more user-friendly Internet Identity.
2. Data Sharing
OpenID credentials stored within Internet Identity are not shared with any other third-party except as otherwise discussed herein.
3. Data Retention
The user’s Gmail address and the name associated with that Gmail address are created in Internet Identity when the Google account is linked to it. Such data is retained by Internet Identity for as long as the application requires it to provide the intended functionality, such as remembering which Google account was linked to which Internet Identity user. No new data is retained after every login with Google in Internet Identity.
4. User Rights & Compliance
As Internet Identity only stores the user’s Gmail address and the name associated with that Gmail address, all of which are received through Google Sign In, unlinking the user’s Google account from Internet Identity will render the aforementioned data unrecoverable by neither Internet Identity nor the Internet Computer. To unlink your Google account, please contact support@dfinity.org.
5. Changes to This Policy
We may update this Privacy Policy and we may post new versions from time to time, at our discretion.
6. Contact
For questions on how to exercise your rights, please send an email to support@dfinity.org.