As of 2024, Google Play requires every app that supports user accounts to provide a dedicated data deletion URL — a page where users can request deletion of their account and associated data without needing to install or open the app. If you've received a policy warning in Play Console, this is almost always why. This guide explains where the field lives, what the linked page must describe, and how Google's automated scans re-validate it over time.
In Google Play Console, open your app → Policy → App content → Data safety. Scroll to the 'Data deletion' section. You'll see a question asking whether users can request their data be deleted. Answer 'Yes' and Google will reveal a URL field where you paste your hosted deletion page.
The URL must be publicly accessible, must not require login to view, and must describe the deletion process in plain language. Google's automated checks periodically re-validate this URL, so it has to stay live — if the page goes down or starts 404ing, your app can get surfaced in the Play Console policy warnings section until you fix it.
Google requires the page to clearly state: (1) which types of data will be deleted vs. retained, (2) how a user initiates a deletion request (email address, form, or in-app flow), and (3) how long the deletion takes to process. If your app retains certain data for legal or tax reasons — for example, transaction records you must keep for 7 years — the page must say so explicitly and list the retention period.
The page must describe two separate flows if your app supports them: deletion of the account itself, and deletion of specific data tied to the account. Google's policy team cares that users can request partial deletion (e.g. 'delete my content but keep my account') when that's technically possible.
Apps get flagged when the deletion page is missing entirely, when it requires users to log in to view it, when it only describes deletion of the account without mentioning the underlying data, or when it forces users to email an address that isn't monitored. Google's review team will test the flow, so the contact method you list has to actually work.
Another common flag: the deletion page lives on a different domain than the app's listed privacy policy. That's not technically a rejection cause, but it can confuse the automated scanner into thinking the page isn't really yours. Hosting both on the same subdomain (like yourapp.baseterms.com/privacy and yourapp.baseterms.com/deletion) avoids the issue.
BaseTerms generates a Data Deletion page alongside your Privacy Policy, Terms, and Support pages — all hosted on the same subdomain at yourapp.baseterms.com/deletion. The page describes the deletion request flow, retention exceptions, and contact method that Google's scanner looks for. Paste the URL into Play Console and the policy warning clears on the next scan.
Ready to ship?
Privacy Policy, Terms, Support, and Data Deletion — all 4 pages, ready to paste into App Store Connect and Google Play Console. Copy the raw Markdown free or host on a custom subdomain for $9 one-time.
One-time payment. No subscription. No renewal fees.