Why Your Wi-Fi Signal Is Also a Location Signal
Picture this: you settle into a hotel lobby, tap the free Wi-Fi network, and open an app. A prompt asks whether the app may use your location. Later, an ad for a shop two blocks away appears. That is not coincidence. Your connection told the app and the sites you visited something about where you are.
Google's publisher policies treat Wi-Fi data the same way they treat GPS and cell-tower signals: as information that can identify or be used to infer a user's accurate geographic location. The wording matters. The policy does not say Wi-Fi always pinpoints your street address, only that the data can be used to infer precise location, with accuracy depending on the environment and how the data is combined with other signals.
The same signal that keeps you online can feed ad personalization, analytics, and attribution. The rules below apply to any site that collects, processes, or discloses precise location data derived from your Wi-Fi connection.
What "Precise Geolocation" Means
Before going further, it helps to understand the threshold. Google's policy explicitly names GPS, Wi-Fi, and cell-tower data as examples of information that can identify or be used to infer a user's accurate geographic location. Precise geolocation is not limited to a GPS coordinate on a map. A Wi-Fi network you connect to, combined with databases of known network locations, can narrow your position down to a building or a block.
That is why a coffee-shop connection and a home router both count. Neither needs to produce a perfect address to trigger the disclosure and consent requirements. If the data can reasonably be used to infer where you are, the rules apply.
The First Rule: Notice Before Use
A site that collects, processes, or discloses Wi-Fi-derived precise location data must first tell you, through an interstitial or an immediate notice, how the data may be used. The notice must cover the possible purposes, which may include ad personalization, analytics, and attribution, and must state that the data may be shared with partners.
In practice, the notice should appear before the site begins using your location, not buried in a settings page. If you do not recall seeing such a prompt, pause and check the site's privacy policy before continuing.
The Second Rule: Opt-In Consent
Notice alone is not enough. The policy requires publishers to obtain your explicit consent — an opt-in — before collecting, processing, or disclosing precise location data that comes from Wi-Fi signals.
This is a meaningful distinction. An opt-out arrangement would let a site gather location data unless you actively objected. The opt-in standard flips that: the site must wait for your affirmative choice. A consent prompt you did not actively confirm should not count as permission.
The Third Rule: Encrypted Transmission
Once you have consented, the data still cannot travel carelessly. Wi-Fi-derived precise location data must be sent to Google in encrypted form or through an encrypted channel. This is a baseline expectation that location data is not exposed during transmission.
The Fourth Rule: Privacy-Policy Disclosure
The requirements do not end at the moment of consent. Sites must also disclose the collection, processing, and disclosure of Wi-Fi location data in all applicable privacy policies. The site's documented commitments should match the prompts you see.
This is one of the easier checks you can do yourself. Open a site's privacy policy and look for language about location data, Wi-Fi, or precise geolocation. If the policy never mentions location on a site that asked for it, the gap is worth noticing.
Extra Protections for Children Under 13
Sites directed at children get additional protections. Properties covered by COPPA that use Google ad services must be flagged as child-directed, for example through Google Search Console or AdMob SDK tagging. Once flagged, the property may not use interest-based advertising, including remarketing, to target users known to be under 13.
What You Can Do When You Join a Network
You do not need to be a privacy expert to apply these rules. A few concrete steps help:
- Check your device's location permissions. On most phones, you can see which apps asked for location access and revoke it.
- Read the privacy policy before connecting on unfamiliar networks. Search for words like "precise location," "Wi-Fi," and "location data."
- Pay attention to consent prompts. A compliant site shows an interstitial or immediate notice before using your location and waits for your opt-in.
Two caveats are worth noting. First, privacy policies are often vague about location, and a prompt you saw weeks ago is easy to forget — neither means a site is automatically compliant. Second, the standard described here is Google's publisher policy, not a statement of US law. State privacy laws may impose different or additional requirements, and policy wording can change over time.
The Bottom Line
A Wi-Fi connection is more than a doorway to the internet; it is a location signal sites can use to infer where you are. If a site monetizes with Google ads, the rules are specific: disclose the use through an interstitial or immediate notice, obtain explicit opt-in consent, transmit the data encrypted, and document everything in the privacy policy. When a site fails any of those steps, you have reason to be cautious.
For the official wording, see Google's publisher policy on device and location data, the AdSense program policies on violations and account actions, and Google's Search Console documentation on flagging COPPA-covered properties. This article is informational, not legal advice; if you run a site and have compliance questions, consult a qualified professional and check the current policy pages.
研究の知恵