Privacy policy clauses for Firebase Cloud Messaging
Firebase Cloud Messaging is Google's push notification service that delivers targeted messages to mobile and web app users. Websites use it to send real-time notifications, alerts, and updates directly to user devices to increase engagement and communication.
Free scan · No signup · Results in 60 seconds
What data Firebase Cloud Messaging collects
Your privacy policy must disclose each of the following data types when you use Firebase Cloud Messaging.
When does Firebase Cloud Messaging trigger privacy obligations?
Firebase Cloud Messaging (FCM) begins collecting data the moment you integrate its SDK into your mobile app or web application. The immediate data flows are: (1) device tokens—unique identifiers that FCM generates and stores to route notifications to specific devices; (2) device information including OS version, app version, and device model; and (3) delivery and engagement metrics showing whether notifications were delivered, opened, or dismissed.
These flows trigger GDPR Article 6 (lawful basis) and Article 13/14 (transparency) obligations if your app users are in the EU—you must establish legal grounds (typically user consent under Article 7) and provide privacy notices disclosing FCM and Google LLC as a processor. Device tokens and delivery data constitute personal data under GDPR recital 26 because they identify or relate to an identifiable person.
CCPA Section 1798.100 applies if users are California residents; device tokens and engagement data are 'personal information' triggering disclosure, opt-out, and deletion rights.
