One banner for CCPA, CPRA, VCDPA, CPA, CTDPA and the rest of the US map. “Do Not Sell” built in. GPC honored. Geo-detects the visitor. Free plan — Pro from $99 once.
Your Privacy Rights
We collect and use personal information as described in our Privacy Policy. California residents can opt out of the sale or sharing of personal information.
19 comprehensive state statutes and counting. Pick a state — the globe looks at it and we show the cookie rules that apply.
United States
Works on every platform you ship to
Not a GDPR clone with the flags swapped. Opt-out, sale/sharing, and a browser signal most European banners ignore.
Ad cookies and pixels count as a sale or share in California. The banner ships with the control, a privacy-rights footer, and granular categories.
California, Colorado, and others treat a GPC header as a valid opt-out. Marketing cookies stay blocked.
Sec-GPC: 1 → sale/share: denied → marketing scripts: blocked
California sees CCPA. Virginia sees targeted-ads opt-out. One snippet.
Visitor detected
California · CCPA
Do Not SellUS state laws do not copy GDPR. We rewrite copy and defaults when you switch frameworks.
Every opt-out, exportable. No lock-in if an attorney general asks.
Does not block HTML parsing. Scripts gated by consent.
Shipping a European consent wall to US traffic both over-blocks ads and still misses the link California actually requires.
Opt-out, Do Not Sell, GPC, and geo-targeting — the actual US rules.
The default Cookiebot / OneTrust layout most US stores copy-paste.
Paste a URL, check the US defaults, drop in one snippet.
We scan the site, pick the CCPA template, and fill in cookie categories. About a minute.
“Do Not Sell,” GPC, and geo-targeting are already on. Tweak colours so it looks like your brand.
WordPress, Shopify, Webflow, Wix, or raw HTML. Tracking scripts stay blocked until the visitor chooses.
The cookie-relevant bits. For the California deep dive see the CCPA / CPRA guide or /compliance/ccpa.
Jan 2020 · CPRA Jan 2023
Right to know, delete, correct, and opt out of sale and sharing. Honor GPC. “Do Not Sell or Share My Personal Information” must be obvious. CPPA and the Attorney General enforce; consumers can sue after certain data breaches ($100–$750 statutory damages).
Jan 1, 2023
Access, deletion, portability, and opt-out of targeted advertising and profiling. Data protection assessments for high-risk processing. Cookie implication: targeted-ads opt-out, not a GDPR-style wall.
Jul 1, 2023
Same consumer rights plus a Universal Opt-Out Mechanism. A GPC-enabled browser is an opt-out of sale and targeted advertising. This is the state that made browser signals non-optional.
Jul 1, 2023
Access, correction, deletion, portability, opt-out of targeted advertising. Privacy by design and data minimization. Cookie notices must describe purposes in plain language.
Jul 1, 2024
No CCPA-style revenue threshold for most controllers. Opt-out of sale and targeted advertising. If you have a US audience at all, Texas is often in scope before California is.
2023–2026 effective dates
A Virginia-family of statutes: consumer rights and targeted-advertising opt-out, with local twists on assessments and definitions. The map above lists each one. New bills keep landing — the banner is built so adding a state is a copy and a toggle, not a rebuild.
COPPA if the site is directed at children under 13 — parental consent, not a state opt-out. HIPAA and GLBA for health and financial entities. FERPA for education records. The banner covers the cookie layer; it does not replace a BA agreement or a GLBA privacy notice.
Don’t see yours? Email hi@cookie-banner.ca — we reply same-day.
No signup, no credit card. Free plan includes CCPA “Do Not Sell,” GPC, and consent logs. Pro is $99 once.
