Evidence Snapshot

Derived from gemini.google.com.har and gemini.googleNOV4.com.har. Captures Play Logging, Signaler, and experimental telemetry.

Requests

327

Latest capture (Nov 4)

Play Log POSTs

75

`play.google.com/log`

Signaler Requests

50

`signaler-pa.clients6.google.com`

Infrastructure Flow

Gemini Web Client
Prompt input, UI interactions
ā†“
Play Logging Service
`play.google.com/log` (SAPISIDHASH-signed)
ā†“
Signaler / Telemetry
`signaler-pa.clients6` + `clients4` endpoints
ā†“
Google Analytics / Tag Manager

Top Hosts

Source: HAR enumerations (Nov 4 capture)

Play Logging Payload

POST https://play.google.com/log?format=json&hasfast=true\nAuthorization: SAPISIDHASH _\nBody: {"clientInfo":{"clientType":65,"androidId":"..."},"logSourceName":"GEMINI_WEB","logEvent":[{"sourceExtensionJson":"{\"event\":\"prompt_submit\",\"promptLength\":384,\"sessionId\":\"b7d22...\"}"}]}

SAPISIDHASH derives from Google account cookies ā†’ ties telemetry to the logged-in identity.

Request Breakdown

Signaler Layer

  • signaler-pa.clients6.google.com ā€“ 50 requests
  • clients4.google.com/inprod ā€“ telemetry ack uploads
  • Handles latency metrics, heartbeat pings, call stats

Accounts & Experiments

  • accounts.google.com ā€“ session refresh (SID cookies)
  • www.googletagmanager.com ā€“ experiment toggles
  • www.google-analytics.com ā€“ optional page view logging

AI Privacy Shield ā€“ Gemini Profile

Blocklist Targets

  • āœ• play.google.com/log*
  • āœ• signaler-pa.clients6.google.com*
  • āœ• clients4.google.com/inprod*
  • āœ• www.googletagmanager.com*
  • āœ• www.google-analytics.com*

Header Controls

remove: `x-client-data`\nremove: `sec-ch-ua`\nremove: `sec-ch-ua-platform`\nremove: `sec-ch-ua-mobile`\nāœ• `SAPISIDHASH` (strict mode)

Shield telemetry: 773+ Gemini requests blocked in 1h43m session.