I’m using Google OAuth 2.0 for user authentication in my application, and it’s working well. However, during the authentication/registration process, users are notified that my application will receive their email address. I don’t need the user’s email address for my application and would prefer not to request it at all.

Is there a way to configure Google OAuth 2.0 so that the user’s email address is not requested or received? I want to ensure that users are not asked for permission to share their email address with my application. I understand that I can simply ignore and not persist the email address, but that’s not the solution I’m looking for.

My Google search so far has been completely unsuccessful in this regard, and it seems to go against the design concept to not receive the email address. Nevertheless, I would like to ask this question because I genuinely do not want to know or handle my users’ email addresses, especially from a privacy perspective.

Any guidance on how to adjust the OAuth 2.0 scopes or settings to achieve this would be greatly appreciated.

Thank you!