> ## Content Index
> Fetch the complete content index at: https://www.promptthemarket.com/llms.txt
> Use this file to discover other available public pages before exploring further.

# Google Ads Customer Match now accepts raw IP addresses
- URL: https://www.promptthemarket.com/google-ads-customer-match-now-accepts-raw-ip-addresses/
- Published: 2026-09-28T08:30:00.000Z
- Updated: 2026-09-28T08:29:59.000Z
- Description: Google Ads Customer Match, the product that lets advertisers upload first-party customer data to build audiences across Search, Shopping, Gmail, YouTube and Display, now accepts two new identifier types: a raw internet protocol (IP) address and a user interaction timestamp.
- Author: Editor News
- Tags: Advertising, Australia, Google Ads, #author-xaviery-malinao, #by Xaviery Malinao

By **Xaviery Malinao** · 2026-09-27

TLDR

Google Ads Customer Match now accepts raw IP addresses and interaction timestamps as audience identifiers, lifting match rates from Q3 2026\. Under Australia's Privacy Act, IP addresses are regulated personal information, making Australian advertisers immediately responsible for APP 3 and APP 6 compliance.

KEY TAKEAWAYS

01Google Ads Customer Match added raw IP addresses and timestamps as audience identifiers, rolling out from Q3 2026.

02Without a timestamp, Google defaults to matching the most recently observed user of that IP address.

03IP address matching is unavailable for users in the European Economic Area, the United Kingdom and Switzerland.

04Australia's privacy regulator explicitly lists IP addresses as personal information under the Privacy Act 1988.

05Tranche-2 Privacy Act reforms, released 31 August 2026, propose a fair-and-reasonable collection test covering this kind of data.

## What changed in the Customer Match product

Google Ads Customer Match, the product that lets advertisers upload first-party customer data to build audiences across Search, Shopping, Gmail, YouTube and Display, now accepts two new identifier types: a raw internet protocol (IP) address and a user interaction timestamp. The Data Manager application programming interface (API), the technical layer through which advertisers send audience data to Google, supports sending un-hashed IP addresses and timestamps in CompositeData for Customer Match from Q3 2026.[\[1\]](https://developers.google.com/data-manager/api/devguides/audiences/send-audience-members?ref=promptthemarket.com)

Lindsey Volta, from Google's Data Manager API Team, said the aim was higher match rates. "Providing IP addresses along with their corresponding observation timestamps in IpData will help drive higher match rates for Google Ads Customer Match beginning in Q3 2026," Volta said.[\[6\]](https://ads-developers.googleblog.com/2026/05/data-manager-api-now-supports-sending.html?ref=promptthemarket.com)

## How the matching works

Email addresses and phone numbers have always required SHA256 hashing before upload to Customer Match. IP addresses and timestamps go in raw. Google secures the upload with Transport Layer Security (TLS) encryption, limits the data to audience matching and policy compliance checks, and says uploaded files are not used to build user profiles.[\[3\]](https://support.google.com/google-ads/answer/6334160?ref=promptthemarket.com)

Upload an IP address without a corresponding timestamp and the system defaults to the most recently observed user of that IP address.[\[2\]](https://support.google.com/google-ads-data-manager/answer/14184381?ref=promptthemarket.com) In any household or office where one IP address is shared across multiple people and devices, the match lands on whoever Google last saw at that address, which may not be the person the advertiser intended to reach.

## Where the feature does not apply

IP address matching is unavailable for end users in the European Economic Area (EEA), the United Kingdom and Switzerland.[\[2\]](https://support.google.com/google-ads-data-manager/answer/14184381?ref=promptthemarket.com) Those jurisdictions impose stricter consent and data-minimisation requirements on online identifiers. Australia has no equivalent carve-out.

## Why Australian advertisers face a live compliance question

The Office of the Australian Information Commissioner (OAIC) is explicit: personal information under the Privacy Act 1988 includes IP addresses.[\[4\]](https://www.oaic.gov.au/privacy/your-privacy-rights/your-personal-information/what-is-personal-information?ref=promptthemarket.com) That classification does not hinge on whether the data is hashed. An un-hashed IP address uploaded to a third-party platform is regulated from the moment it leaves the advertiser's server, triggering Australian Privacy Principle (APP) 3 obligations around collection and APP 6 obligations around use and disclosure.

The OAIC has already warned businesses about tracking technologies. "Given the potential privacy risks and significant community concern about the use of tracking technologies, the OAIC strongly encourages organisations to err on the side of caution and comply with the Privacy Act when using third-party tracking pixels on their website," the regulator said.[\[7\]](https://www.oaic.gov.au/privacy/privacy-guidance-for-organisations-and-government-agencies/organisations/tracking-pixels-and-privacy-obligations?ref=promptthemarket.com)

## Tranche-2 reforms add further pressure

The federal government released the second tranche of Privacy Act reforms on 31 August 2026, proposing a fair-and-reasonable collection test, a right to erasure, and new controls on trading location and tracking data.[\[5\]](https://ministers.ag.gov.au/media-centre/modernising-australias-privacy-laws-digital-age-31-08-2026?ref=promptthemarket.com) Location data, like IP addresses, is explicitly named as personal information under the proposed framework.

For Australian advertisers, the practical sequence runs like this: confirm whether privacy notices disclose IP address collection for advertising purposes, check that the basis for collection satisfies APP 3, then assess whether forwarding the data to Google constitutes a disclosure to a third party requiring separate APP 6 justification. The tranche-2 consultation period closes before the Q3 2026 Customer Match rollout completes, so any advertiser already testing the feature is doing so while the legal floor beneath it is still being built.

SOURCES & CITATIONS

1. [Data Manager API: Send Audience Members](https://developers.google.com/data-manager/api/devguides/audiences/send-audience-members?ref=promptthemarket.com)
2. [Google Ads Data Manager Help: Customer Match IP address support](https://support.google.com/google-ads-data-manager/answer/14184381?ref=promptthemarket.com)
3. [Google Ads Help: Customer Match policy](https://support.google.com/google-ads/answer/6334160?ref=promptthemarket.com)
4. [OAIC: What is personal information](https://www.oaic.gov.au/privacy/your-privacy-rights/your-personal-information/what-is-personal-information?ref=promptthemarket.com)
5. [Attorney-General's Department: Modernising Australia's privacy laws, 31 August 2026](https://ministers.ag.gov.au/media-centre/modernising-australias-privacy-laws-digital-age-31-08-2026?ref=promptthemarket.com)
6. [Google Ads Developer Blog: Data Manager API now supports sending IP addresses](https://ads-developers.googleblog.com/2026/05/data-manager-api-now-supports-sending.html?ref=promptthemarket.com)
7. [OAIC: Tracking pixels and privacy obligations](https://www.oaic.gov.au/privacy/privacy-guidance-for-organisations-and-government-agencies/organisations/tracking-pixels-and-privacy-obligations?ref=promptthemarket.com)

FREQUENTLY ASKED QUESTIONS

Do Australian advertisers have to comply with the Privacy Act when using IP addresses in Customer Match?

Yes. The OAIC explicitly classifies IP addresses as personal information under the Privacy Act 1988, so collecting and uploading them to a third-party platform like Google Ads triggers Australian Privacy Principle obligations, specifically APP 3 on collection and APP 6 on use and disclosure.

Why does Customer Match accept IP addresses without hashing when email and phone data must be hashed?

Google's product documentation does not explain the technical reason for the difference. Email and phone numbers have always required SHA256 hashing before upload; IP addresses and timestamps are sent raw and protected only by TLS encryption in transit.

What happens if I upload an IP address without a timestamp?

Google's system defaults to matching the most recently observed user of that IP address, which in a shared household or office environment may not be the intended customer.

Is IP address matching available for my customers in the UK or Europe?

No. Google has excluded end users in the European Economic Area, the United Kingdom and Switzerland from IP address matching. Australian users have no equivalent exclusion.

[Xaviery Malinao](https://www.promptthemarket.com/xaviery-malinao/)

Xaviery Malinao writes for Prompt the Market on how brands and agencies are adapting to answer engines, drawing on Bushnote's work with clients across search, AI search and content.