One signal, every website, no per-site opt-out forms
Opting out of data sale and sharing on a website-by-website basis has always been impractical — most people interact with hundreds of data-collecting sites and would need to find and submit a separate opt-out request to each one. Global Privacy Control (GPC) solves this by letting your browser send a single, standardized signal to every site you visit, communicating your opt-out preference automatically, without needing to visit a privacy settings page on each individual site.
2026 made GPC a legal requirement, not just a nice-to-have
As of January 1, 2026, Kentucky, Rhode Island, and Indiana joined the growing list of U.S. states requiring businesses to recognize Global Privacy Control specifically, bringing the total number of states mandating support for universal opt-out preference signals to eight. Twenty states now have comprehensive consumer privacy laws in effect, and regulators have shown they will enforce this: Tractor Supply was fined $1.35 million under CCPA for providing a non-functional opt-out mechanism, underscoring that "having a form" isn't the same as actually honoring opt-out signals.
The problem: almost nobody knows if their own browser sends it
GPC is a browser-level setting, and browser defaults vary enormously. Brave and the DuckDuckGo browser send GPC by default with no action required. Firefox supports it but requires manually enabling a specific setting. Chrome, Safari, and Edge — collectively used by the large majority of internet users — don't send GPC natively at all as of 2026, requiring a browser extension to add the capability.
What GPC actually does and doesn't cover
GPC communicates an opt-out preference for the sale and sharing of personal data under applicable state laws — it is not a technical tracking blocker on its own, and it doesn't prevent a site from collecting data for its own first-party use in ways the law still permits. It's a legal signal, not a technical firewall, which is exactly why the states requiring it also require businesses to actually honor it rather than silently ignore it.
How to check whether yours is active
Most people have never checked. The browser API that exposes this — navigator.globalPrivacyControl — returns a straightforward true or false, but there's no obvious place in most browser UIs to see this at a glance. A live check of that value tells you definitively whether the signal is currently active for the browser you're using right now, rather than guessing based on settings you may not remember configuring.
Fixing it once you know
If GPC isn't active, the fix depends entirely on which browser you use: a checkbox in Firefox's privacy settings, nothing needed in Brave, or a dedicated extension for Chrome, Safari, or Edge. Because GPC operates per-browser rather than per-device or per-account, checking (and if needed, fixing) each browser you regularly use is the only way to be sure the opt-out actually follows you everywhere you browse.
Frequently Asked Questions
GPC is a browser-level signal that communicates an opt-out of the sale and sharing of your personal data to every website you visit automatically, rather than requiring you to submit an opt-out request on each site individually. It's recognized as a legally binding preference signal under a growing number of U.S. state privacy laws.
Eight U.S. states currently mandate recognition of universal opt-out preference signals like GPC, including Kentucky, Rhode Island, and Indiana, which joined as of January 1, 2026. Twenty states in total now have comprehensive consumer privacy laws in effect, though not all of them specifically mandate GPC recognition.
It depends on your browser. Brave and the DuckDuckGo browser send it by default with no setup needed. Firefox supports it but requires manually enabling a setting. Chrome, Safari, and Edge do not send it natively as of 2026 and require a browser extension to add the capability.
No. Do Not Track was an earlier, similar concept that most major browsers have deprecated because it was never legally enforceable — most sites simply ignored it. GPC is the modern successor that carries actual legal weight in states that have adopted opt-out preference signal requirements.
Yes — the Global Privacy Control Signal Checker reads your browser's real, live navigator.globalPrivacyControl value (along with Do Not Track and cookie settings) and tells you exactly what's active, plus browser-specific steps to enable it if it isn't.