diff --git a/public/static/docs/user-guide/privacy.md b/public/static/docs/user-guide/privacy.md
index e0a99f9b4c..a80f448d3c 100644
--- a/public/static/docs/user-guide/privacy.md
+++ b/public/static/docs/user-guide/privacy.md
@@ -42,8 +42,16 @@ section of this User Guide.
 
 ## Scopes
 
+`userinfo.email` scope (view your email address), `userinfo.profile` scope (see
+your personal info, including any personal info you've made publicly available),
+and `openid` scope (authenticate using OpenID Connect) are required to be used
+by Google Auth. DVC authorizes users via
+[Google's server](https://accounts.google.com/o/oauth2/auth) and doesn't access
+or collect users data used by Google Auth.
+
 DVC allows you to manage your Google Drive files and therefore the default
-scopes include read/write access to Google Drive.
+scopes include `drive` scope (read/write access to your Google Drive) and
+`drive.appdata` scope (manage configuration folder in your Google Drive).
 
 ## Sharing user data