https://support.google.com/analytics/answer/2700409

If you’ve enabled any Google Analytics Advertising Features, you are required to notify your visitors by disclosing the following information in your privacy policy:

  • The Google Analytics Advertising Features you’ve implemented.
  • How you and third-party vendors use first-party cookies (such as the Google Analytics cookie) or other first-party identifiers, and third-party cookies (such as the DoubleClick cookie) or other third-party identifiers together.
  • How visitors can opt-out of the Google Analytics Advertising Features you use, including through Ads Settings, Ad Settings for mobile apps, or any other available means (for example, the NAI’s consumer opt-out).

We also encourage you to point users to Google Analytics’ currently available opt-outs for the web. https://tools.google.com/dlpage/gaoptout/

Because laws across countries and territories vary, and because Google Analytics can be used in many ways, Google is unable to provide the exact language you need to include in your privacy policy. Only you understand the unique aspects and special considerations of your business, and your privacy policy should account for this information that only you can provide.