How the “Do Not Sell or Share” option works

The “Do Not Sell or Share My Personal Information” option is required under several US state privacy laws (such as CPRA, CPA, and CTDPA). It gives users the right to opt out of selling or sharing their personal data.

In CookieHub, this functionality is managed through the IAB Global Privacy Platform (GPP) framework and appears in the Personal data section of the Preference Center.

When is this option shown?

The “Allow sale and sharing of personal information” checkbox is shown only when:

• The user is in a region configured with IAB GPP in your CookieHub dashboard

This checkbox is not displayed for other frameworks, such as CookieHub Choices or IAB TCF 2.2.

How users interact with it

There are two parts to this feature:

1. First-layer dialog (optional link)

You can show a “Do Not Sell or Share My Personal Information” link in the initial consent dialog. When clicked, it opens the Preference Center on the Personal data tab.

To enable this:

1. Go to Dashboard → Domain list → Settings
2. Click Customize for the region using IAB GPP
3. Open the Preference Center tab and check Show personal data tab
4. In the Banner/notice tab, enable the action Do not sell (link)

2. Preference Center → Personal data tab

• Displays a checkbox: Allow sale and sharing of personal information
• Checked by default
• When unchecked, CookieHub treats it as an opt-out request
• This preference is reflected in the IAB GPP string and the US Privacy (USP) string

What happens when the user opts out?

When a user unchecks the box (or when a Global Privacy Control (GPC) signal is detected):

• The IAB GPP string updates to reflect opt-out for:
  • Sale of personal information
  • Sharing for cross-context behavioral advertising
• The US Privacy (USP) string is generated for backward compatibility
• (Optional) CookieHub can automatically disable specific cookie categories (e.g., Marketing, Analytics)

How to configure category opt-outs

To automatically disable services or categories when users opt out:

1. Go to Customize for the region using IAB GPP
2. Open the Preference Center tab
3. Under Opt-out category mapping, select categories to disable (e.g., Marketing, Analytics)

This ensures both vendor signals and local tracking reflect the user’s choice.

Summary of functionality