You have indicated that your app has features related to “email reporting and monitoring”, as defined in the Gmail user data and developer policy. This is specified in the Google Cloud Platform Console under the Scopes section of the OAuth consent screen page. We would like to remind you that starting June 3, 2024, apps that use information from emails to provide reporting or monitoring services will require periodic Gmail access renewals. This change helps protect privacy and security for new and existing users.
What do you need to know?
After June 3, 2024, newly granted Gmail access for consumer Google accounts to reporting and monitoring apps will automatically expire after six months. Users must renew permissions for continued access. Any existing Gmail access granted to these apps will expire on July 15, 2024 unless renewed by the user. Users will be able to renew or revoke this access at any time through the “Third-party apps & services” page on My Account. Users may receive reminders from Google about upcoming access expirations in order to renew them before they expire.
Note: Workspace Enterprise end users and admins will not be impacted by this policy change at this time.
What do you need to do?
Test your application(s) to ensure that they are able to handle an invalid_grant response from the OAuth 2.0 servers. Such handling may include re-authenticating the user and requesting user consent to obtain new tokens.
If you would like to be notified when a refresh token has been revoked, you can register to receive events through Cross-Account Protection.
If you take no action, and your application is not able to handle user re-authorization after a token expires, you may begin to see OAuth errors and your application’s functionality may be affected.
If necessary, you may request a one-time extension through this form for your application(s). If the extension is granted, Gmail access will expire on October 1, 2024.
Note: If you have already requested an extension please ignore this instruction.
The following OAuth application(s) will be subject to periodic Gmail access renewals starting June 3, 2024:
- Is it possible to delete email reporting and monitoring permissions?
- Will verification be no longer required after deleting this permission? Has anyone done this?
daoping liu is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.