-
Do Not Sell My Personal Information: the link, the signal, and which one to build first
Do Not Sell is two mechanisms: a link visitors click and an opt-out signal their browser sends. Here is what the CCPA and its regulations say about each, why a cookie banner is not one of them, and which one to build first.
-
Global Privacy Control: is your site ignoring people who opted out?
Our demo store is set up to honor Global Privacy Control. Its consent log had five records in it, and every one of them said the signal was absent. Nothing was broken. It took me a minute to work out why, and the answer is the most useful thing I know about GPC. All five…
-
Add consent management to your site by telling your coding agent to do it
If you build with a coding agent, you can set up consent management the same way you built the site: connect one MCP server, describe what you want, review the diff. This post walks through the full flow, including what the scanner found when I ran it on my own site.
-
CIPA demand letters: why ordinary websites are getting them, and how to check yours
Thousands of businesses have received letters claiming their analytics or ad pixels violate a 1967 California wiretapping law. Here is what actually triggers those claims, how to check your own site in about ten minutes, and what the courts are saying.
