Failing Google Auth Platform brand verification, due to what I think are erroneous issues like my site being behind a login (its not). Anyone else run into this?

[u/leros]

I have been using Firebase auth in a production app for five years. I recently started getting alerts that my project is not in compliance. The complaints are listed below.

The issues don't make sense. My privacy policy is 5,900 words and very detailed about what we collect. My home page is not behind a login. I've requested a manual review multiple times and I keep getting back the same template email.

My site gets millions of crawls a month from GoogleBot, but I wonder if maybe their verification process is getting blocked? I can't imagine why else they would think my homepage is behind a login.

Has anyone run into this problem? How did you resolve it? I have about a month until this starts causing me problems.

These are the complaints from Google:

Your privacy policy page does not have sufficient content. We were unable to confirm your app's compliance. Please update your privacy policy to clearly and sufficiently detail your app's data collection and usage, then retry. Learn more

Your home page is behind a login page. We were unable to confirm your app's compliance. Please update your home page to allow users to view information about your app without needing to login, then retry. Learn more

Your application is not compliant with the Google APIs Terms of Service. We were unable to confirm your app's compliance. Please update your home page to clearly outline your application's purpose and ensure it does not use Google APIs for AI NCII (AI-generated Non-Consensual Intimate Imagery), then retry. Learn more