Free Global Privacy Control checker
Does your site honour the GPC opt-out?
California treats the Global Privacy Control signal as a valid request to opt out of the sale or sharing of personal data. We visit your site in a real browser with GPC switched on and watch whether advertising pixels still send data or set cookies.
What we test
GPC opt-out is honoured
A separate visit with the Sec-GPC: 1 header and navigator.globalPrivacyControl on. Any advertising pixel that still sends data or sets cookies is flagged.
CCPA / CPRA · 11 CCR §7025
'Do Not Sell or Share' link
Whether the opt-out link California requires is shown on the site.
CCPA §1798.135
Privacy policy names every third party
We compare the trackers we saw with the companies your policy lists.
CCPA §1798.130
What your free report shows
Free
- Your Risk Score and risk band
- Pass or fail on the GPC test
- The law each test relates to
- Full detail and fix for 1 lower-risk issue
Paid plans
- Which ad pixels ignored the signal, and what they sent
- Full detail on serious issues
- Step-by-step fixes for your consent tool and tags
- Screenshot evidence and PDF export
A real opt-out test, not a settings checklist
| Halvus | Typical free checker | |
|---|---|---|
| Sends a real Sec-GPC: 1 signal | Yes | Usually asks you to install an extension |
| Records pixels that ignore it | Yes | No |
| Only counts advertising as sell/share | Yes | Often flags every cookie |
| Consumer law, accessibility, security too | Yes | No |
Questions
What is Global Privacy Control (GPC)?
GPC is a browser setting that tells every website a visitor does not want their personal data sold or shared. Browsers send it as the Sec-GPC: 1 header and expose it to page code as navigator.globalPrivacyControl.
Do websites have to honour GPC?
Under the California Consumer Privacy Act (CCPA / CPRA) and its regulations (11 CCR §7025), businesses covered by the law must treat GPC as a valid opt-out of sale or sharing. California has already taken enforcement action against companies that ignored it.
How do I test if my site honours the GPC signal?
Visit the site with GPC switched on and watch whether advertising tags still send data or set cookies. Halvus does this automatically in a fresh, separate browser visit and records which pixels ignored the signal.
What counts as 'selling or sharing' in this test?
Only advertising pixels such as ad networks and social ad tags. Analytics and essential tools are not counted, so a pass or fail reflects the cases the law is aimed at.
What if the GPC visit doesn't work?
If the browser visit with GPC on doesn't complete, or the signal wasn't applied, the check is marked not tested rather than guessed.
Is the checker free?
Yes. You can scan any website once a day for free with no sign-up. Paid plans unlock full evidence, fixes and regular monitoring.
Will it tell me my site is compliant?
No. Halvus reports the risks it finds with evidence. It is not legal advice and never certifies a website as compliant.
Halvus reports risks found, not legal advice.