Probably pretty much everything. Think like the party who requested it. They just accessed someone's private digital life, you think they will be shy asking for data?
Location history, installed apps, photos, videos, Gmail, etc. best to assume they have a full export.
I think what the grand parent was hinting with Google Analytics is data collected outside of what's stored directly in the Google account. If you visit a site that has Google Analytics on or if you fill a Recaptcha, do they match this with your Google account and store it somewhere, outside of your account? And is this data available to third parties?
Do I trust Google to do the right thing? Hell no. Do I trust Google legal to not directly lie to me? I do.
> Google Public DNS stores two sets of logs: temporary and permanent. The temporary logs store the full IP address of the machine you're using. We have to do this so that we can spot potentially bad things like DDoS attacks and so we can fix problems, such as particular domains not showing up for specific users.
> We delete these temporary logs within 24 to 48 hours.
> In the permanent logs, we don't keep personally identifiable information or IP information. We do keep some location information (at the city/metro level) so that we can conduct debugging, analyze abuse phenomena. After keeping this data for two weeks, we randomly sample a small subset for permanent storage.
> We don't correlate or combine information from our temporary or permanent logs with any personal information that you have provided Google for other services.
We are talking a company of which the most profitable part is targeted ads. You really doubt they will not try to group as much information of a single entity as they possibly can? People will have all sorts of excuses like "they can't do that, cookieless domains" etc etc but I am fairly certain that each and every data point which Google has access to, will be tried to be matched with some sort of account or account husk. It might not all be visible or directly accessible/usable until they can segment and label it but they have the data and want to use it either now or in the future.
If Google did not use every iota of information to help target ads, then somebody at Google is slacking. It's their core business. As a corporation, each employee is obliged to do their best to advance Google's goals. The employees are very smart, by and large.
This all adds up to, every way conceivable to use information to target ads, is used that way. I'm not trying to be kind or unkind, cynical or mean. Its just the logic of the situation.
That's their business model but not everything they do is in support of that. The hundred or thousands of employees that works on GSuite-only products like Currents and Meet don't care about phoning home data for ad targeting purposes. The same goes for a multitude of other things they do, eg. hardware, cloud computing, security, mapping (as in the actual mapping; I know G maps shows ads), and probably also 99% of people on the Chrome/Android teams.
As per this whitepaper[0], data made by organizations (in "G Suite Core Services"[1]) is not available to their ad platform, and most likely includes all the related services that are limited to G Suite accounts (Hangouts Chat, Currents, Meet, Jamboard, etc.).
> We do not scan for advertising purposes in Gmail or other G Suite services. Google does not collect or use data in G Suite services for advertising purposes.
I mention the other divisions of Google because what their job title is means they aren't "obligated" to collect everything for use by the ad platform, as the parent implies.
I also doubt much of the actual data is available to the ad platform. Do they know you visited console.cloud.google.com? Most likely via Chrome sync history and/or Google Analytics. Do they know whether or not your cloud project is running a single n1 instance or a fleet of c2 instances? I doubt it, especially because there's not much reason to encourage other cloud computing services to advertise to someone that's directly using a competing Google service.
Location history, installed apps, photos, videos, Gmail, etc. best to assume they have a full export.