> They have access to IP+time, your search query, and
> cookies for correlation to other requests. It's
> valuable information
Valuable for blackmail, but not really useful for anything else; the commercial value of information rapidly degrades over time. Knowing I want to buy a new fridge today is very valuable, knowing I wanted to buy one last month is nearly worthless. > IP+time is enough to get your personal identity
> information from your ISP (physical location of the
> endpoint, billing information), I have no idea if
> Google's relationship with ISPs is good enough to
> buy that or if it's only available to cops.
Despite what the RIAA think, a user agent's IP is nowhere near accurate enough for use as identification.I hope that ISPs do not release personal identity or billing data to arbitrary third parties. I know my ISP (sonic.net) claims they don't[1], and even privacy-insensitive companies such as AT&T have privacy policies that would forbid them from selling personal data[2].
Even if it were possible for random companies to obtain personal data from an ISP, I doubt that Google would have any interest in participating.