Hosting Your Privacy Policy: What Google Play Will and Won't Accept
Play Console requires a live, publicly accessible URL for your privacy policy — not a PDF attachment, not a policy embedded only inside the app with no web version. The link needs to resolve with a 200 status at the time of review and stay live afterward.
A common failure mode: developers host the policy on a personal site or free hosting service that later goes down, and a routine Play re-check during an update flags the app for a now-broken policy link.
The fix
Fix: host your policy somewhere with uptime guarantees you control, and check the link resolves before every submission, not just the first one.
The same check runs automatically when you upload your bundle to the AAB analyzer — permissions, SDK fingerprints, and version info in one pass, free.
Keep going
Run this check on your own AAB
Free analysis, exports when you need them.