1:09Ep 5: GPC: the browser’s opt-out signal
A Denver reader opted out before your banner even loaded.
Lesson notes
A Denver reader opted out before your banner even loaded.
That’s GPC, Global Privacy Control, a browser signal meaning don’t sell or share my data.
She has GPC switched on in Firefox. Her browser sends a header, sec GPC, set to one, with every request, and pages can read the same flag in JavaScript. She lands on game.example. Before any click, your CMP treats the signal as an opt-out of sale, sharing and targeted ads, and records it in the GPP string, which has a GPC field. Prebid passes that to every bidder. Her visit still sells, just without targeting on her data. California and Colorado require businesses to honour it, as do several other states. From January twenty twenty seven, California also makes every browser offer such a signal.
Today, switch on GPC in a test browser, load your site, and check the GPP string shows the opt-out.
Next… the Privacy Sandbox post mortem.
Go deeper · 3 min readNavigating Privacy Regulations: Compliance Strategies for Ad Tech CompaniesUp next in this series
1:13Ep 6: Privacy Sandbox post-mortemEp 6: Privacy Sandbox post-mortem
1:10Ep 7: Universal IDs: UID2, ID5, SharedIDEp 7: Universal IDs: UID2, ID5, SharedID
1:16Ep 8: Prebid identity modules in plain languageEp 8: Prebid identity modules in plain language
1:08Ep 9: Contextual targeting without IDsEp 9: Contextual targeting without IDs
1:06Ep 10: PAIR and clean roomsEp 10: PAIR and clean rooms
1:06Ep 1: CMPs and the TC stringEp 1: CMPs and the TC string
1:08Ep 2: TCF v2.3 and disclosedVendorsEp 2: TCF v2.3 and disclosedVendors
1:14Ep 3: No Google-certified CMP? No personalized adsEp 3: No Google-certified CMP? No personalized ads
1:11Ep 4: US privacy: GPP replaced the US Privacy stringEp 4: US privacy: GPP replaced the US Privacy string