Do not sell link and Global Privacy Control

Several US state privacy laws, such as California's CCPA, give visitors the right to opt out of the sale or sharing of their personal information, including for targeted advertising. Cookies & Privacy Compliance shows a separate "Do not sell or share my personal information" link to visitors in those states, and honours the Global Privacy Control (GPC) signal some browsers send.

Where the link shows

The link shows only to visitors in places where Shopify offers the opt-out. Choose those places on Privacy and regions by ticking US states with privacy laws (CCPA and others) and applying the change (see Privacy and regions).

The link sits in the bottom corner of the page, next to the reopen button, on the side you choose in the theme editor (Cookie preferences button side). Any link on your store whose address ends in #do-not-sell opens the same opt-out, so you can also add one to your footer menu.

What visitors see

The link opens a short dialog that explains the right to opt out, with an Opt out button. After opting out, the visitor sees that they have opted out. The opt-out is the only place the app ever changes the sale-of-data choice: accepting cookies in the banner does not opt a visitor back in.

Global Privacy Control

GPC is a browser setting that tells websites not to sell or share the visitor's data. In the states where the opt-out applies, Shopify treats GPC as an opt-out automatically. When a visitor with GPC on opens the opt-out, the dialog tells them their browser's signal has already been honoured.

The compliance centre checks both for every US state law in force: that visitors in the state can opt out, and that GPC is honoured.