Google's Privacy Principles

Thursday, January 28th marks International Data Privacy Day. We're recognizing this day by publicly publishing our guiding Privacy Principles.

• Use information to provide our users with valuable products and services.
• Develop products that reflect strong privacy standards and practices.
• Make the collection of personal information transparent.
• Give users meaningful choices to protect their privacy.
• Be a responsible steward of the information we hold.

We've always operated with these principles in mind. Now, we're just putting them in writing so you have a better understanding of how we think about these issues from a product perspective. Like our design and software guidelines, these privacy principles are designed to guide the decisions we make when we create new technologies. They are one of the key reasons our engineers have worked on new privacy-enhancing initiatives and features like the Google Dashboard, the Ads Preferences Manager and the Data Liberation Front. And there is more in store for 2010.

You can find out more about our efforts at the Google Privacy Center and on our YouTube channel.

Posted by Alan Eustace, Senior Vice President, Engineering & Research

A new approach to China

Like many other well-known organizations, we face cyber attacks of varying degrees on a regular basis. In mid-December, we detected a highly sophisticated and targeted attack on our corporate infrastructure originating from China that resulted in the theft of intellectual property from Google. However, it soon became clear that what at first appeared to be solely a security incident--albeit a significant one--was something quite different.

First, this attack was not just on Google. As part of our investigation we have discovered that at least twenty other large companies from a wide range of businesses--including the Internet, finance, technology, media and chemical sectors--have been similarly targeted. We are currently in the process of notifying those companies, and we are also working with the relevant U.S. authorities.

Second, we have evidence to suggest that a primary goal of the attackers was accessing the Gmail accounts of Chinese human rights activists. Based on our investigation to date we believe their attack did not achieve that objective. Only two Gmail accounts appear to have been accessed, and that activity was limited to account information (such as the date the account was created) and subject line, rather than the content of emails themselves.

Third, as part of this investigation but independent of the attack on Google, we have discovered that the accounts of dozens of U.S.-, China- and Europe-based Gmail users who are advocates of human rights in China appear to have been routinely accessed by third parties. These accounts have not been accessed through any security breach at Google, but most likely via phishing scams or malware placed on the users' computers.

We have already used information gained from this attack to make infrastructure and architectural improvements that enhance security for Google and for our users. In terms of individual users, we would advise people to deploy reputable anti-virus and anti-spyware programs on their computers, to install patches for their operating systems and to update their web browsers. Always be cautious when clicking on links appearing in instant messages and emails, or when asked to share personal information like passwords online. You can read more here about our cyber-security recommendations. People wanting to learn more about these kinds of attacks can read this Report to Congress (PDF) by the U.S.-China Economic and Security Review Commission (see p. 163-), as well as a related analysis (PDF) prepared for the Commission, Nart Villeneuve's blog and this presentation on the GhostNet spying incident.

We have taken the unusual step of sharing information about these attacks with a broad audience not just because of the security and human rights implications of what we have unearthed, but also because this information goes to the heart of a much bigger global debate about freedom of speech. In the last two decades, China's economic reform programs and its citizens' entrepreneurial flair have lifted hundreds of millions of Chinese people out of poverty. Indeed, this great nation is at the heart of much economic progress and development in the world today.

We launched Google.cn in January 2006 in the belief that the benefits of increased access to information for people in China and a more open Internet outweighed our discomfort in agreeing to censor some results. At the time we made clear that "we will carefully monitor conditions in China, including new laws and other restrictions on our services. If we determine that we are unable to achieve the objectives outlined we will not hesitate to reconsider our approach to China."

These attacks and the surveillance they have uncovered--combined with the attempts over the past year to further limit free speech on the web--have led us to conclude that we should review the feasibility of our business operations in China. We have decided we are no longer willing to continue censoring our results on Google.cn, and so over the next few weeks we will be discussing with the Chinese government the basis on which we could operate an unfiltered search engine within the law, if at all. We recognize that this may well mean having to shut down Google.cn, and potentially our offices in China.

The decision to review our business operations in China has been incredibly hard, and we know that it will have potentially far-reaching consequences. We want to make clear that this move was driven by our executives in the United States, without the knowledge or involvement of our employees in China who have worked incredibly hard to make Google.cn the success it is today. We are committed to working responsibly to resolve the very difficult issues raised.

Update: Added a link to another referenced report in paragraph 5.

Posted by David Drummond, SVP, Corporate Development and Chief Legal Officer

Transparency, choice and control — now complete with a Dashboard!

Today, we are excited to announce the launch of Google Dashboard. Have you ever wondered what data is stored with your Google Account? The Google Dashboard offers a simple view into the data associated with your account — easily and concisely in one location.

Over the past 11 years, Google has focused on building innovative products for our users. Today, with hundreds of millions of people using those products around the world, we are very aware of the trust that you have placed in us, and our responsibility to protect your privacy and data. In the past, we've taken numerous steps in this area, investing in educating our users with our Privacy Center, making it easier to move data in and out of Google with our Data Liberation Front, and allowing you to control the ads you see with interest-based advertising. Transparency, choice and control have become a key part of Google's philosophy, and today, we're happy to announce that we're doing even more.

In an effort to provide you with greater transparency and control over your own data, we've built the Google Dashboard. Designed to be simple and useful, the Dashboard summarizes data for each product that you use (when signed in to your account) and provides you direct links to control your personal settings. Today, the Dashboard covers more than 20 products and services, including Gmail, Calendar, Docs, Web History, Orkut, YouTube, Picasa, Talk, Reader, Alerts, Latitude and many more. The scale and level of detail of the Dashboard is unprecedented, and we're delighted to be the first Internet company to offer this — and we hope it will become the standard. Watch this quick video to learn more and then try it out for yourself at www.google.com/dashboard.



Posted by Alma Whitten, Software Engineer, Yariv Adan, Product Manager, and Marissa Mayer, VP of Search Products and User Experience

Introducing Google Social Search: I finally found my friend's New York blog!

Your friends and contacts are a key part of your life online. Most people on the web today make social connections and publish web content in many different ways, including blogs, status updates and tweets. This translates to a public social web of content that has special relevance to each person. Unfortunately, that information isn't always very easy to find in one simple place. That's why today we're rolling out a new experiment on Google Labs called Google Social Search that helps you find more relevant public content from your broader social circle. It should be available for everyone to try by the end of the day, so be sure to check back.

A lot of people write about New York, so if I do a search for [new york] on Google, my best friend's New York blog probably isn't going to show up on the first page of my results. Probably what I'll find are some well-known and official sites. We've taken steps to improve the relevance of our search results with personalization, but today's launch takes that one step further. With Social Search, Google finds relevant public content from your friends and contacts and highlights it for you at the bottom of your search results. When I do a simple query for [new york], Google Social Search includes my friend's blog on the results page under the heading "Results from people in your social circle for New York." I can also filter my results to see only content from my social circle by clicking "Show options" on the results page and clicking "Social." Check out this video for a demo:



All the information that appears as part of Google Social Search is published publicly on the web — you can find it without Social Search if you really want to. What we've done is surface that content together in one single place to make your results more relevant. The way we do it is by building a social circle of your friends and contacts using the connections linked from your public Google profile, such as the people you're following on Twitter or FriendFeed. The results are specific to you, so you need to be signed in to your Google Account to use Social Search. If you use Gmail, we'll also include your chat buddies and contacts in your friends, family, and coworkers groups. And if you use Google Reader, we'll include some websites from your subscriptions as part of your social search results.

To learn more about how Social Search works behind the scenes, including the choices and control you have over the content you see and share, read our help center article or watch this video:



This feature is an experiment, but we've been using it at Google and the results have been exciting. We'd love to hear your feedback. Oh, and don't forget to create a public Google profile to expand your social circle and more easily find the information you're looking for (including that New York blog).

Posted by Maureen Heymans, Technical Lead and Murali Viswanathan, Product Manager

Managing your reputation through search results

(Cross-posted on the Webmaster Central Blog)

A few years ago I couldn't wait to get married. Because I was in love, yeah, but more importantly, so that I could take my husband's name and people would stop getting that ridiculous picture from college as a top result when they searched for me on Google.

After a few years of working here, though, I've learned that you don't have to change your name just because it brings up some embarrassing search results. Below are some tips for "reputation management": influencing how you're perceived online, and what information is available relating to you.

Think twice

The first step in reputation management is preemptive: Think twice before putting your personal information online. Remember that although something might be appropriate for the context in which you're publishing it, search engines can make it very easy to find that information later, out of context, including by people who don't normally visit the site where you originally posted it. Translation: don't assume that just because your mom doesn't read your blog, she'll never see that post about the new tattoo you're hiding from her.

Tackle it at the source

If something you dislike has already been published, the next step is to try to remove it from the site where it's appearing. Rather than immediately contacting Google, it's important to first remove it from the site where it's being published. Google doesn't own the Internet; our search results simply reflect what's already out there on the web. Whether or not the content appears in Google's search results, people are still going to be able to access it — on the original site, through other search engines, through social networking sites, etc. — if you don't remove it from the original site. You need to tackle this at the source.

• If the content in question is on a site you own, easy — just remove it. It will naturally drop out of search results after we recrawl the page and discover the change.
• It's also often easy to remove content from sites you don't own if you put it there, such as photos you've uploaded, or content on your profile page.
• If you can't remove something yourself, you can contact the site's webmaster and ask them to remove the content or the page in question.

After you or the site's webmaster has removed or edited the page, you can expedite the removal of that content from Google using our URL removal tool.

Proactively publish information

Sometimes, however, you may not be able to get in touch with a site's webmaster, or they may refuse to take down the content in question. For example, if someone posts a negative review of your business on a restaurant review or consumer complaint site, that site might not be willing to remove the review. If you can't get the content removed from the original site, you probably won't be able to completely remove it from Google's search results, either. Instead, you can try to reduce its visibility in the search results by proactively publishing useful, positive information about yourself or your business. If you can get stuff that you want people to see to outperform the stuff you don't want them to see, you'll be able to reduce the amount of harm that that negative or embarrassing content can do to your reputation.

You can publish or encourage positive content in a variety of ways:

• Create a Google profile. When people search for your name, Google can display a link to your Google profile in our search results and people can click through to see whatever information you choose to publish in your profile.
• If a customer writes a negative review of your business, you could ask some of your other customers who are happy with your company to give a fuller picture of your business.
• If a blogger is publishing unflattering photos of you, take some pictures you prefer and publish them in a blog post or two.
• If a newspaper wrote an article about a court case that put you in a negative light, but which was subsequently ruled in your favor, you can ask them to update the article or publish a follow-up article about your exoneration. (This last one may seem far-fetched, but believe it or not, we've gotten multiple requests from people in this situation.)

Hope these tips have been helpful! Feel free to stop by our Web Search Forum and share your own advice or stories about how you manage your reputation online.

Posted by Susan Moskwa, Webmaster Trends Analyst

The bright side of sitting in traffic: Crowdsourcing road congestion data

This post is the latest in an ongoing series about how we harness the data we collect to improve our products and services for our users. - Ed.

What if you could do a little something to improve the world during your daily drive to work? Here are a few ideas: tell everybody in the city when you're stuck in slow-moving traffic; warn the drivers on the freeway behind you that they should consider an alternate route; tell the people still at home that they should spend another ten minutes reading the morning news before they leave for work; tell your city government that they might want to change the timing of that traffic light at the highway on-ramp. Of course, you can't just get on the phone and call everybody, and your one traffic report from your one spot on the road might not help much anyway. But if everybody on the road, all at once, could tell the world how fast their car is moving, and we could make it easy for anybody to check that information on their computer or cell phone, well — then we'd be getting somewhere.

If you use Google Maps for mobile with GPS enabled on your phone, that's exactly what you can do. When you choose to enable Google Maps with My Location, your phone sends anonymous bits of data back to Google describing how fast you're moving. When we combine your speed with the speed of other phones on the road, across thousands of phones moving around a city at any given time, we can get a pretty good picture of live traffic conditions. We continuously combine this data and send it back to you for free in the Google Maps traffic layers. It takes almost zero effort on your part — just turn on Google Maps for mobile before starting your car — and the more people that participate, the better the resulting traffic reports get for everybody.


This week we're expanding our traffic layer to cover all U.S. highways and arterials when data is available. We're able to do this thanks in no small part to the data contributed by our users. This is exactly the kind of technology that we love at Google because it's so easy for a single person to help out, but can be incredibly powerful when a lot of people use it together. Imagine if you knew the exact traffic speed on every road in the city — every intersection, backstreet and freeway on-ramp — and how that would affect the way you drive, help the environment and impact the way our government makes road planning decisions. This idea, which we geeks call "crowdsourcing," isn't new. Ever since GPS location started coming to mainstream devices, people have been thinking of ways to use it to figure out how fast the traffic is moving. But for us to really make it work, we had to solve problems of scale (because you can't get useful traffic results until you have a LOT of devices reporting their speeds) and privacy (because we don't want anybody to be able to analyze Google's traffic data to see the movement of a particular phone, even when that phone is completely anonymous).

We achieve scale by making Google Maps for mobile easy to install and use, and by making it easy for people to provide information about their own vehicle speed. There's no extra device to plug into your car and no extra software to buy. Google Maps is free and works with most cell phones, and the number of cell phones with GPS is rising every day. Some phones, such as the T-Mobile myTouch 3G and the Palm Pre, come with Google Maps and traffic crowdsourcing pre-installed (the iPhone Maps application, however, does not support traffic crowdsourcing). Google is fortunate to have a lot of people using our products, and that scale helps make our products better.

We understand that many people would be concerned about telling the world how fast their car was moving if they also had to tell the world where they were going, so we built privacy protections in from the start. We only use anonymous speed and location information to calculate traffic conditions, and only do so when you have chosen to enable location services on your phone. We use our scale to provide further privacy protection: When a lot of people are reporting data from the same area, we combine their data together to make it hard to tell one phone from another. Even though the vehicle carrying a phone is anonymous, we don't want anybody to be able to find out where that anonymous vehicle came from or where it went — so we find the start and end points of every trip and permanently delete that data so that even Google ceases to have access to it. We take the privacy concerns related to user location data seriously, and have worked hard to protect the privacy of users who share this data — but we still understand that not everybody will want to participate. If you'd like to stop your phone from sending anonymous location data back to Google, you can find opt-out instructions here.

We've already been able to provide useful traffic information with the help of our existing mobile users, but we hope that is just the start. As GPS-enabled phones and data plans get less expensive, more people will be able to participate. Crowdsourcing traffic gives us a way to harness bits of location data from our users and give it back to them in a form they can use to make impactful decisions that affect their free time, their pocketbooks and the environment. The more people use it, the better it will get. So next time you're sitting in morning traffic, turn on Google Maps for mobile and let someone else know they can hit the snooze button one more time. Tomorrow morning, they might do the same for you.

Posted by Dave Barth, Product Manager for Google Maps

Understanding health-related searches

As we blogged last summer, there are lots of experiments running on Google web search all over the world. Today we've started a temporary experiment that some people might find interesting: we're researching how Google users search the Internet when they or someone they know is feeling sick.

Understanding how people search when they're feeling sick is an important problem to solve, as it can help improve projects like Google Flu Trends, which uses aggregated search data to detect influenza epidemics. Statistics gathered in this experiment may also help Google deliver more relevant search results in the future. For example, someone who searches for [arthritis pain] to understand why an aging parent is experiencing joint pain might want to learn about nearby health facilities and potential treatments, whereas somebody who searches for [arthritis pain] because she is doing a research project might want results about how common arthritis is and what its risk factors are. Rather than make educated guesses about how many users are searching because they're sick, we're running this experiment to collect real statistics. This is not a permanent change, but a short-term experiment. A small percentage of random health-related searches will trigger the poll question.

For example, at the bottom of the search results for [headache], some users will see a survey which asks whether they were searching because they or someone they know has a headache:


Similarly, if you happen to search for [ibuprofen], a common anti-inflammatory drug, you might see a survey which asks whether you were searching because you or somebody you know is taking ibuprofen:


Data collected in this survey will be aggregated across thousands of users. Survey responses will be stored together with the original search query, but will not be associated with email addresses or other personally identifiable information. Survey data will not be used for advertising — it will only be used to help Google improve health-related search results and to help refine public health trends based on aggregated search queries, much like Google Flu Trends. You can learn more about how Google protects users' privacy at our Privacy Center.

For more information, please take a look at our FAQ.

Posted by Roni Zeiger, MD, Product Manager and Jeremy Ginsberg, Software Engineer

Making ads more interesting

At Google, we believe that ads are a valuable source of information — one that can connect people to the advertisers offering products, services and ideas that interest them. By making ads more relevant, and improving the connection between advertisers and our users, we can create more value for everyone. Users get more useful ads, and these more relevant ads generate higher returns for advertisers and publishers. Advertising is the lifeblood of the digital economy: it helps support the content and services we all enjoy for free online today, including much of our news, search, email, video and social networks.

That's why Google has worked hard to create technology that makes the advertising on our own sites, and those of our partners, as relevant as possible. To date, we have shown ads based mainly on what your interests are at a specific moment. So if you search for [digital camera] on Google, you'll get ads related to digital cameras. If you are visiting the website of one of our AdSense partners, you would see ads based on the content of the page. For example, if you're reading a sports page on a newspaper website, we might show ads for running shoes. Or we can show ads for home maintenance services alongside a YouTube video instructing you on how to perform a simple repair. There are some situations, however, where a keyword or the content of a web page simply doesn't give us enough information to serve highly relevant ads.

We think we can make online advertising even more relevant and useful by using additional information about the websites people visit. Today we are launching "interest-based" advertising as a beta test on our partner sites and on YouTube. These ads will associate categories of interest — say sports, gardening, cars, pets — with your browser, based on the types of sites you visit and the pages you view. We may then use those interest categories to show you more relevant text and display ads.

We believe there is real value to seeing ads about the things that interest you. If, for example, you love adventure travel and therefore visit adventure travel sites, Google could show you more ads for activities like hiking trips to Patagonia or African safaris. While interest-based advertising can infer your interest in adventure travel from the websites you visit, you can also choose your favorite categories, or tell us which categories you don't want to see ads for. Interest-based advertising also helps advertisers tailor ads for you based on your previous interactions with them, such as visits to their websites. So if you visit an online sports store, you may later be shown ads on other websites offering you a discount on running shoes during that store's upcoming sale.

Our advertisers and publisher partners have been asking us for a long time to offer interest-based advertising. Advertisers need an efficient way to reach those who are most interested in their products and services. And publishers can generate more revenue when they connect advertisers to interested audiences.

This kind of tailored advertising does raise questions about user choice and privacy — questions the whole online ad industry has a responsibility to answer. Many companies already provide interest-based advertising and they address these issues in different ways. For our part, we're launching interest-based advertising with three important features that demonstrate our commitment to transparency and user choice.

• Transparency - We already clearly label most of the ads provided by Google on the AdSense partner network and on YouTube. You can click on the labels to get more information about how we serve ads, and the information we use to show you ads. This year we will expand the range of ad formats and publishers that display labels that provide a way to learn more and make choices about Google's ad serving.
• Choice - We have built a tool called Ads Preferences Manager, which lets you view, delete, or add interest categories associated with your browser so that you can receive ads that are more interesting to you.
• Control - You can always opt out of the advertising cookie for the AdSense partner network here. To make sure that your opt-out decision is respected (and isn't deleted if you clear the cookies from your browser), we have designed a plug-in for your browser that maintains your opt-out choice.
  

To find out more about what Google is doing in this important area, please visit our Public Policy blog and Privacy Center.

Keyword advertising has been so successful because it's useful to users, advertisers and publishers — everyone's interests are aligned. We believe that interest-based ads will create the same virtuous cycle, by giving users more relevant ads, while generating higher returns for advertisers and publishers.

Posted by Susan Wojcicki, VP, Product Management

See where your friends are with Google Latitude

How often do you find yourself wondering where your friends are and what they're up to? It's a pretty central question to our daily social lives, and it's precisely the question you can now answer using Google Latitude.

Latitude is a new feature for Google Maps on your mobile device. It's also an iGoogle gadget on your computer. Once you've opted in to Latitude, you can see the approximate location of your friends and loved ones who have decided to share their location with you. So now you can do things like see if your spouse is stuck in traffic on the way home from work, notice that a buddy is in town for the weekend, or take comfort in knowing that a loved one's flight landed safely, despite bad weather.

And with Latitude, not only can you see your friends' locations on a map, but you can also be in touch directly via SMS, Google Talk, Gmail, or by updating your status message; you can even upload a new profile photo on the fly. It's a fun way to feel close to the people you care about.

Fun aside, we recognize the sensitivity of location data, so we've built fine-grained privacy controls right into the application. Everything about Latitude is opt-in. You not only control exactly who gets to see your location, but you also decide the location that they see. For instance, let's say you are in Rome. Instead of having your approximate location detected and shared automatically, you can manually set your location for elsewhere — perhaps a visit to Niagara Falls . Since you may not want to share the same information with everyone, Latitude lets you change the settings on a friend-by-friend basis. So for each person, you can choose to share your best available location or your city-level location, or you can hide. Everything is under your control and, of course, you can sign out of Latitude at any time. Check out this video to learn more about the privacy features.

Finally, since we'd like you to be able to use Latitude with any of your friends, we've been working hard to make it available to as many people as possible. Today, Latitude is available in 27 countries, and we hope to add more soon.

Ready to share your location? If you have a mobile smartphone, visit google.com/latitude on your phone's web browser to download the latest version of Google Maps for mobile with Latitude. Latitude is available on Blackberry, S60, and Windows Mobile, and will be available on Android in the next few days. We expect it will be coming to the iPhone, through Google Mobile App, very soon.

No smartphone? No worries. Visit google.com/latitude on your desktop or laptop to install the Latitude iGoogle gadget and share your location right from your computer. If you have Google Gears installed in your browser (you do by default if you use Google Chrome), you can automatically share your location; otherwise, manually set your location to let your friends know where you are.

Visit the Google Mobile blog for more details, and check out the video below to see Latitude in action.



Posted by Vic Gundotra, VP Engineering, Google mobile team

Raising data privacy awareness

For the second year, the U.S. and Canada are joining 27 European countries to celebrate Data Privacy Day today. As we explained last year, the lack of understanding about online data protection is a global issue. As increasing amounts of data get uploaded to the Internet every day, it becomes more and more important for people to understand the benefits and risks of online communications and to learn how to use available tools to control and manage the information they share online.

To mark this special day of awareness, we are supporting an event hosted by the Information Technology Association of America called "Data Privacy Day: Increasing Privacy Awareness and Trust." We'll join U.S. and European government officials and key members of the privacy community on Capitol Hill in Washington, DC, to discuss how to increase public awareness about data privacy. This event is a part of our ongoing constructive dialogue with regulators and legislators, consumer and industry groups, and think tanks and privacy advocates to discuss how to protect user information.

Our efforts to raise data privacy awareness extend beyond the public policy arena; we aim to connect directly with our users, too. We're committed to protecting users' online privacy by following the principles of transparency and choice. We're transparent about the data we collect, and we design products that give people control over the information they share. Earlier this year, we revamped our Privacy Center, where we offer information, tips, and videos that explain Google's privacy practices and show people how they can control what data they share. The Privacy Center also includes a link to a series of blog posts about how we use data to improve our products and services for our users. We recently translated the Privacy Center into multiple languages so that we can better serve people all around the world. We're also continuously working on innovative services and features that make information available to people in new ways, but with built-in privacy controls. For example, we introduced privacy-protective face-blurring for Street View earlier this year. And the launch of our browser, Google Chrome, included a feature for surfing the Internet in "incognito mode."

For the coming year, we want to improve our privacy practices even more by engaging in further dialogue with people who use our products and services, offering up easier-to-understand policies, and providing more privacy tools and controls. We hope that you'll take a few minutes on Data Privacy Day to explore our Privacy Center and learn about our commitment to this important issue.

Posted by Peter Fleischer and Jane Horvath, Global Privacy Counsel

Google Chrome (BETA)

Since we first released Google Chrome, the development team has been hard at work improving the stability and overall performance of the browser. In just 100 days, we have reached more than 10 million active users around the world (on all seven continents, no less) and released 14 updates to the product. We're excited to announce that with today's fifteenth release we are taking off the "beta" label!

Google Chrome is a better browser today thanks to the many users who sent their feedback and the many more who enabled automatic crash reports, helping us rapidly diagnose and fix issues. Some of the areas where we've made great progress include:

Better stability and performance of plug-ins (particularly video). Video and audio glitches were among the most common bugs fixed during the beta period. If you had problems watching videos with Google Chrome in the past, you should be pleasantly surprised with the performance now.

Even more speed. Google Chrome starts up fast, loads pages quickly, and just keeps getting faster. Since the first beta, the V8 JavaScript engine runs 1.4 times faster on the SunSpider benchmark and 1.5 times faster on the V8 benchmark — and there is more speed to come.

Bookmark manager and privacy controls. We heard you! Better bookmark features were a top request from our users. It's now easier to switch between another browser and Google Chrome with the bookmark import and export features, and we added a new simple way to manage large numbers of bookmarks, too. We also wanted to make it even easier for you to control your browsing data, so all of the features in Google Chrome which affect user privacy are now grouped in one place with detailed explanations for each one.

We've taken security very seriously from the beginning and we will continue to look for ways to make Google Chrome and all browsers even more secure. Google Chrome's unique sandbox technology creates an additional layer of defense against harmful software, while the Safe Browsing feature provides protection against phishing and malware attacks for many browser users.

We have removed the beta label as our goals for stability and performance have been met but our work is far from done. We are working to add some common browser features such as form autofill and RSS support in the near future. We are also developing an extensions platform along with support for Mac and Linux. If you are already using Google Chrome, the update system ensures that you get the latest bug fixes and security patches, so you will get the newest version automatically in the next few days. If you haven't used Google Chrome for a while, now might be a good time to give it another spin.

Download Google Chrome and try it out. Let us know what you think.

Posted by By Sundar Pichai, VP, Product Management, and Linus Upson, Engineering Director

How we help track flu trends

This post is the latest in an ongoing series about how we harness the data we collect to improve our products and services for our users. - Ed.

Google search isn't just about looking up football scores from last weekend or finding a great hotel for your next vacation. It can also be used for the public good. Yesterday, we announced Google Flu Trends, which uses aggregated search data in an effort to confront the challenge of influenza outbreaks.

By taking Google Trends — where you can see snapshots of what's on the public's collective mind — and applying the tool to a public health problem, our engineers found that there was a correlation between flu-related queries and the actual flu. They created a model for near real-time estimates about outbreaks, in the hopes that both health care professionals and the general public would use this tool to better prepare for flu season.

Since we launched yesterday, the response from the medical community has been positive. "The earlier the warning, the earlier prevention and control measures can be put in place," said Dr. Lyn Finelli of the influenza division at the Centers for Disease Control and Prevention, to The New York Times. "[T]his could prevent cases of influenza." You can check out the tool for yourself.

We couldn't have built this flu detection system without analyzing historical patterns. Because flu season is different every year, just a few months of data wouldn't have done the trick. For example, the 2003-2004 flu season was unusually severe in many regions. The data from that season was especially robust and allowed us to discover a more accurate, reliable set of flu-related terms. To learn more about how we built the system, see this page on how Flu Trends works.

Because we're committed to protecting your privacy, we made sure that the searches that we analyze for Google Flu Trends are not drawn from personally-identifiable search histories but rather from an aggregated set of hundreds of billions of searches.

In order to provide a rough geographic breakdown of potential flu outbreaks, we use IP address information from our server logs to make a best guess about where queries originate. To protect your privacy, we anonymize those IP addresses at nine months. And we don't provide this aggregated, anonymized data to third parties. For more information about the privacy protections for Flu Trends check out our FAQs and privacy policy.

This is just the first launch in what we hope will be several public service applications of Google Trends in the future. And as we continue to think of ways to use aggregated and anonymized search data in helpful ways, we're also committed to safeguarding our users' privacy.

Posted by Pablo Chavez, Senior Policy Counsel