Privacy policy clauses for Firebase Auth
Firebase Auth is Google's authentication service that enables secure user sign-up and login through email, phone number, and OAuth providers. Websites use it to manage user identity, verify credentials, and control access to protected content and features.
Free scan · No signup · Results in 60 seconds
What data Firebase Auth collects
Your privacy policy must disclose each of the following data types when you use Firebase Auth.
When does Firebase Auth trigger privacy obligations?
Installation and Data Flow
Adding the Firebase Auth SDK to your app or website immediately triggers collection of email addresses, phone numbers (if enabled), hashed passwords, OAuth tokens, IP addresses, and device information. These data flows begin on first load—before any user consciously "signs up." This is not optional: Firebase Auth collects IP and device data as part of its security infrastructure.
