CCPA and CPRA (California privacy law)

California’s consumer privacy law: rights to know, delete, correct and opt out of the sale or sharing of personal data, browser signals included.

The California Consumer Privacy Act took effect in 2020; the CPRA amended it from January 1, 2023 and created the California Privacy Protection Agency to enforce it. It applies to for-profit businesses dealing with Californians above set thresholds, such as an inflation-adjusted revenue limit or data on 100,000 or more consumers. “Sharing” covers cross-context ad tracking, so typical ad pixels count. The regulations require honoring an opt-out preference signal such as GPC as a valid request.

Share: LinkedIn · X ·

Related terms

GDPR: The EU regulation on personal data: lawful basis, minimal data, user rights and breach reporting, for anyone handling EU residents’ data.
Global Privacy Control (GPC): A browser signal that tells every site the person does not want their data sold or shared; California and other states treat it as a legal opt-out.
Session replay: A reconstruction of what a user saw and did on a site: clicks, scrolls, page changes and errors, played back like a video.

← All terms

Need this built, fixed or reviewed?

I build and rescue products with AI coding agents under rules: AI features in production, honest estimates, email that gets delivered.

Book a free 30-min call See price and start date

How I work

Przemysław Zalewski · 15+ years shipping software

“a true bias for action” client CTO, public LinkedIn recommendation

Confidential by default. NDA is standard. I never show your project, name or screenshots without written consent, which is why this site names no clients without permission.
Your code, your accounts. Code and data stay in your repository and accounts. AI tools run with training on your data turned off, and secrets never reach a model.
A handover you can use. Every project ends with the same checklist: a README that gets it running, one architecture diagram, written decisions, CI, a runbook and a recorded walkthrough. It is done when someone outside the project can run it from the docs.
Boring technology where it counts. I pick a stack you can hire for. Anything experimental needs your yes and an exit plan.
Approach matched to your risk appetite. Prototype, product or regulated: the level decides how much autonomy the agents get and how much review and validation each change needs.
Everything checkable. Every number on my pages links to its source. My tools are free, and the idea validator skill is open source (MIT).

My pledge

Reply within 24 hours. I reply within 24 hours on working days, personally, not a bot. Weekend messages: by Monday noon.
Late means free. If I am late, the first hour of work is free. You do not have to ask.
Scope in writing within 24 hours. A free 30-minute call with no company deck, then the scope and the price in writing within 24 hours. You decide.
The person who does the work. You talk to the person who does the work. No sales layer, no handoff.
Follow-up only with news. I follow up only when I have something new for you. Never a "did you see my offer".
Honest "not a fit". If I am not the right person, I say so on the call and point you to someone who is.

All principles, the AI policy and working hours →

Pricing · Security · Privacy and analytics opt-out · Trust center