Respect Global Privacy Control (GPC)
Global Privacy Control (GPC) is a browser-based signal that communicates a user’s request to opt out of the sale or sharing of personal information.
Several US state privacy laws, including CPRA (California) and CPA (Colorado), require businesses to honor valid browser-based opt-out signals. GPC is recognized as one of these signals.
CookieHub automatically detects and responds to GPC requests to help you comply with these requirements.
What is GPC?
GPC is a technical standard that lets users configure browsers or extensions to send an automatic “Do Not Sell or Share” signal.
- Sent as an HTTP header (
Sec-GPC: 1) or JavaScript signal - Supported by browsers like Brave, DuckDuckGo, and certain extensions
- Legally recognized in multiple US states
CookieHub support for GPC
CookieHub always detects GPC and treats it as an opt-out from selling or sharing personal information.
When GPC is detected:
CookieHub applies the same behavior as clicking “Do Not Sell or Share My Personal Information”
If configured, this can include:
- Sending IAB GPP and US Privacy (USP) signals to vendors
- Automatically disabling selected cookie categories (e.g., Marketing, Analytics)
No additional setup is required—GPC support is always enabled.
Optional configuration
If you want GPC-triggered opt-outs to also disable specific cookie categories:
- Go to Dashboard → Domain list → Settings
- Under Regional settings, select the region using IAB GPP (e.g., United States)
Click Customize → Preference Center tab
Make sure:
- Show personal data tab is enabled
- One or more categories (e.g., Marketing, Analytics) are selected for auto-disable when the user opts out
GPC will then follow the same logic as the “Do Not Sell or Share” link.
Summary
| Function | Behavior in CookieHub |
|---|---|
| GPC signal detection | ✅ Automatically handled |
| Vendor signals sent (GPP + USP) | ✅ If region uses IAB GPP |
| Cookie categories auto-disabled | ✅ If configured |
| User interaction required | ❌ No — GPC works silently |