Global Privacy Control (GPC)
A browser signal that tells every site the person does not want their data sold or shared; California and other states treat it as a legal opt-out.
GPC arrives as the Sec-GPC: 1 request header and as navigator.globalPrivacyControl in JavaScript. Some browsers send it by default, others through a setting or an extension. Unlike the old Do Not Track header, it has legal weight: under CCPA regulations it counts as a request to opt out of sale and sharing, and enforcement notices have cited sites that ignored it.
Related terms
- CCPA and CPRA (California privacy law): California’s consumer privacy law: rights to know, delete, correct and opt out of the sale or sharing of personal data, browser signals included.
- GDPR: The EU regulation on personal data: lawful basis, minimal data, user rights and breach reporting, for anyone handling EU residents’ data.
- First-party analytics proxy: Sending analytics through a path on your own domain, so ad blockers that block known analytics hosts do not drop the data.
