The "Do Not Sell or Share My Personal Information" link, and the "Your Privacy Choices" alternative

Updated Oct 27, 2026 · Pewterkit Guides

Under California's privacy law (CCPA), a covered business that sells or shares personal information, which includes sending it to ad platforms for cross-site advertising, posts a link in its homepage header or footer titled "Do Not Sell or Share My Personal Information", or the alternative "Your Privacy Choices". For an app running Meta, TikTok, Google Ads or similar pixels, the usual setup is a footer link to a page where visitors can turn advertising tracking off, with your consent tool honoring the choice.

When it applies

The California Privacy Protection Agency's FAQ says the CCPA covers for-profit businesses that collect consumers' personal information, do business in California, and meet at least one threshold:

  • gross annual revenue of 26.625 million US dollars or more in the preceding calendar year (the adjusted figure from January 1, 2025);
  • buying, selling or sharing the personal information of 100,000 or more California residents or households; or
  • earning 50% or more of annual revenue from selling or sharing California residents' personal information.

Several other US states have similar opt-out rights with their own thresholds. If your app is small today, adding the link early costs little and is ready when you grow.

The CPPA's FAQ describes the link as labeled "Do Not Sell or Share My Personal Information" or "Your Privacy Choices", placed in the website's footer or header, letting a visitor opt out of sale or sharing with that business.

The CCPA regulations (11 CCR section 7015) describe the "Your Privacy Choices" alternative opt-out link in more detail:

  • it is titled "Your Privacy Choices" or "Your California Privacy Choices";
  • it is "located at either the header or footer of the business's internet homepage(s)";
  • the official opt-out icon sits "adjacent to the title", about the same size as other icons in your header or footer.

Template: the footer link and the page it opens

<footer>
  <a href="/privacy">Privacy Policy</a>
  <a href="/privacy-choices">Do Not Sell or Share My Personal Information</a>
</footer>

Your Privacy Choices

We use advertising tools ([Meta Pixel, TikTok Pixel, Google Ads]) that
can count as "selling" or "sharing" personal information under some
US state laws. You can turn this off at any time:

[ Switch: Allow advertising tracking ]  (off = do not sell or share)

If your browser sends a Global Privacy Control signal, we treat it as
this choice automatically and show "Opt-Out Request Honored".
Questions: [privacy@yourdomain.com]

Wire the switch to your consent tool or tag manager so the ad pixels stop loading for visitors who opt out. This is a plain-English starting point you can adapt; for anything specific to your business, a lawyer's quick review is worth it.

Confirm the choice

The CCPA regulations in effect from January 1, 2026 (section 7026(g)) say a business "must provide a means by which the consumer can confirm that their request to opt-out of sale/sharing has been processed"; a message such as "Opt-Out Request Honored" or a switch shown in its off position are the examples given. Show the visitor their current setting on the choices page.

What Pewterkit Check looks for

A free check reads your homepage's public HTML and scripts. When it sees ad pixels (Meta, TikTok, LinkedIn Insight, Google Ads, Pinterest, Reddit or X) and no link reading "Do Not Sell or Share" or "Your Privacy Choices", it lists the pixels it found so you know which ones the link controls.

FAQ

Does a small app need a "Do Not Sell or Share" link?

It depends on the thresholds above. Below them the CCPA link isn't required, though other state laws have their own tests. Many small apps add it anyway once they run ad pixels, because the setup is quick.

Is Google Analytics "selling or sharing"?

It depends on how it is set up, for example whether advertising features are on. The clearest cases are ad pixels used for cross-site targeting. List each tool on your choices page so visitors know what the switch controls.

Can I use "Your Privacy Choices" instead of "Do Not Sell or Share"?

Yes. The regulations allow "Your Privacy Choices" (or "Your California Privacy Choices") as the title of an alternative opt-out link, with the opt-out icon next to it.

Where should the link go?

In the header or footer of your homepage, next to your privacy policy link.

Sources

  1. California Privacy Protection Agency: FAQ — read 27 Oct 2026: who the CCPA covers, revenue threshold from January 1, 2025, link labels and placement, opt-out preference signals
  2. CCPA Regulations, effective January 1, 2026 (California Privacy Protection Agency, PDF) — read 27 Oct 2026: section 7015 (alternative opt-out link titles, header or footer placement, icon) and section 7026(g) (confirming an opt-out was processed)

How this page was made: drafted with AI from the sources listed, reviewed by Pewterkit. Docs checked Oct 27, 2026. Spotted something out of date? Tell us.

Related guides