CCPA+CPRA

CCPA+CPRA opt-outs and Privacy Policy, for small businesses.

California privacy law (CCPA+CPRA) lets residents opt out of the sale or sharing of their personal information. TermsFeed writes your Privacy Policy and shows US visitors the Your Privacy Choices link.

Create your consent banner Generate Privacy Policy
CCPA+CPRACalOPPAGlobal Privacy Control

By law

When the CCPA+CPRA applies to your business.

The CCPA+CPRA covers for-profit businesses that do business in California, collect personal information from California residents and meet 1 of 3 thresholds.

When the CCPA+CPRA applies to a business, and what the business needs
Your businessWhat you needWhy
Has annual gross revenue above $26,625,000, the threshold adjusted for inflation in 2025 Privacy PolicyOpt-out link Cal. Civ. Code §1798.140(d)(1)(A). The California Privacy Protection Agency adjusts the amount in January of every odd-numbered year.
Buys, sells or shares the personal information of 100,000 or more consumers or households a year Privacy PolicyOpt-out link Cal. Civ. Code §1798.140(d)(1)(B). Sharing means disclosing personal information for cross-context behavioral advertising.
Earns 50% or more of annual revenue from selling or sharing personal information Privacy PolicyOpt-out link Cal. Civ. Code §1798.140(d)(1)(C).
Collects personal information from California residents, below every threshold Privacy Policy The CCPA+CPRA does not apply. The California Online Privacy Protection Act (CalOPPA) asks for a Privacy Policy anyway (Cal. Bus. & Prof. Code §22575).

What the CCPA+CPRA asks, and the TermsFeed product for each part.

These rules apply once your business meets a threshold. TermsFeed products help with all 6, and your team answers each consumer request.

CCPA+CPRA requirements for a website, with the TermsFeed product for each
What the law asksWhere it comes fromHow TermsFeed helps
Publish a Privacy Policy with the CCPA disclosures, and update it every 12 months Cal. Civ. Code §1798.130(a)(5)
  • Privacy Policy Generator
Tell visitors what you collect, at or before the point of collection Cal. Civ. Code §1798.100(a)
  • Privacy Policy Generator
Add a Do Not Sell or Share My Personal Information link when you sell or share personal information Cal. Civ. Code §1798.135(a)
  • Privacy Consent
  • CCPA Opt-out
Treat Global Privacy Control as a request to opt out Cal. Code Regs. tit. 11, §7025
  • Privacy Consent
Answer requests to know, delete or correct personal information within 45 days Cal. Civ. Code §1798.130(a)(2)
  • Handled by your team
Explain each discount or reward you give in exchange for personal data in a Notice of Financial Incentive Cal. Code Regs. tit. 11, §7016
  • Privacy Policy Generator

How Privacy Consent handles visitors from the US.

With Standard consent logic, from the Starter plan, TermsFeed Privacy Consent gives US visitors the opt-out model that California law sets, and honors Global Privacy Control on every plan.

  • One Your Privacy Choices link

    Privacy Consent shows US visitors a Your Privacy Choices link with the California opt-out icon, which opens the opt-out choices in the Preferences Center.

  • Global Privacy Control

    Privacy Consent honors the Global Privacy Control (GPC) signal, the opt-out signal California and other US states require, on every plan.

  • Opt-out by default

    With Standard consent logic, from the Starter plan, visitors in the US get the opt-out model: vendor scripts run until the visitor opts out, as California law allows.

  • Limit the Use of sensitive data

    Mark a vendor that processes sensitive data, and the Your Privacy Choices section gets a Limit the Use toggle that turns off every marked vendor at once.

  • A record of every choice

    Privacy Consent keeps a dated record of every consent choice for a regulator or a client who asks, with CSV export on every plan.

  • Stricter rules where they apply

    Privacy Consent asks for consent first in Quebec, as it does in the EU, and asks every visitor first when a vendor processes sensitive data.

What the laws ask

What privacy laws expect, and how TermsFeed covers it.

California sets 2 privacy laws for websites: CalOPPA for every commercial website that collects personal information, and the CCPA+CPRA above its thresholds. Each row names the part TermsFeed handles.

Consent laws, what is at stake and how Privacy Consent covers each one
Law Applies when What it can cost How TermsFeed covers it
CCPA+CPRA California A for-profit business above the CCPA thresholds collects personal information from California residents. Up to $2,500 per violation, or $7,500 per intentional violation or violation involving the data of a minor, as set in Cal. Civ. Code §1798.155, adjusted for inflation.
  • Honors Global Privacy Control signals
  • Your Privacy Choices link to opt out
CalOPPA California, United States Your commercial website or online service collects personal information from California residents. A missing Privacy Policy is a violation of California law (Cal. Bus. & Prof. Code §22575).
  • A Privacy Policy that covers CalOPPA
  • Free hosting page with a permanent link

A summary for orientation, not legal advice.

How Privacy Consent compares.

Free cookie plugins cover the basics, and doing it yourself means adding every script block and consent rule by hand. Privacy Consent keeps the rules for each region current, with a free plan to start.

Free cookie plugins, doing it yourself and TermsFeed Privacy Consent compared
Feature Free cookie plugins Doing it yourselfBanner and scripts coded by hand TermsFeed Privacy Consent
Price Free No fee, only your time Free plan. Paid plans from $9 a month
Global Privacy Control Rarely Manual Yes, on every plan
Rules by visitor location Rarely Rarely Yes, from the Starter plan
Consent log Varies Rarely Yes, with export on every plan

Privacy Consent plans.

Every plan includes the consent banner, Google Consent Mode v2 and the Preferences Center. Paid plans add rules by visitor location managed by TermsFeed, more banner loads and more domains. On the Free plan, a banner that keeps using up its banner loads pauses until the next month or an upgrade.

Billing period

Switch to yearly to pay less.

Billed once a year.

Free

One small website that needs a consent banner.

$0 / month / year

Start for free
  • Included: 1 domain
  • Included: 15,000 banner loads a month
  • Included: 10 vendors
  • Included: Consent log kept 180 days
  • Included: Ongoing regulation monitoring
  • Included: Strict consent logic: the consent banner asks every visitor
  • Included: Google Consent Mode v2 and Microsoft Consent Mode
  • Included: Global Privacy Control (GPC)
  • Included: Preferences Center
  • Included: Consent log export
  • Included: JavaScript callbacks when a visitor accepts or declines
Standard consent logic starts here

Starter

A business website with visitors from several countries.

$9 / month

$89 / year

Or $89 a year with yearly billing.

About $7.42 a month. Saves $19 a year against monthly billing.

Choose Starter Choose Starter
  • Included: 1 domain
  • Higher than the plan before: 125,000 banner loads a monthThen $0.30 per extra 1,000
  • Higher than the plan before: 25 vendors
  • Higher than the plan before: Consent log kept 730 days (24 months)
  • Included: Ongoing regulation monitoring
  • Included: Strict consent logic: the consent banner asks every visitor
  • Included: Google Consent Mode v2 and Microsoft Consent Mode
  • Included: Global Privacy Control (GPC)
  • Included: Preferences Center
  • Included: Consent log export
  • Included: JavaScript callbacks when a visitor accepts or declines
  • Plus
  • Higher than the plan before: 125,000 banner loads a monthThen $0.30 per extra 1,000
  • Higher than the plan before: 25 vendors
  • Higher than the plan before: Consent log kept 730 days (24 months)
  • Included: Standard consent logic: banner rules by visitor location
  • Included: Geolocation rules managed by TermsFeed
  • Included: Multi-language banner
  • Included: Custom banner colors beyond the light and dark palettes
  • Included: Remove TermsFeed branding
  • Included: Basic consent analytics

Pro

A growing business with several websites.

$24 / month

$229 / year

Or $229 a year with yearly billing.

About $19.08 a month. Saves $59 a year against monthly billing.

Choose Pro Choose Pro
  • Higher than the plan before: 5 domains
  • Higher than the plan before: 500,000 banner loads a monthThen $0.30 per extra 1,000
  • Higher than the plan before: Unlimited vendors
  • Included: Consent log kept 730 days (24 months)
  • Included: Ongoing regulation monitoring
  • Included: Strict consent logic: the consent banner asks every visitor
  • Included: Google Consent Mode v2 and Microsoft Consent Mode
  • Included: Global Privacy Control (GPC)
  • Included: Preferences Center
  • Included: Consent log export
  • Included: JavaScript callbacks when a visitor accepts or declines
  • Included: Standard consent logic: banner rules by visitor location
  • Included: Geolocation rules managed by TermsFeed
  • Included: Multi-language banner
  • Included: Custom banner colors beyond the light and dark palettes
  • Included: Remove TermsFeed branding
  • Plus
  • Higher than the plan before: 5 domains
  • Higher than the plan before: 500,000 banner loads a monthThen $0.30 per extra 1,000
  • Higher than the plan before: Unlimited vendors
  • Included: Full consent analytics

Business

High-traffic websites and businesses with many brands.

$59 / month

$569 / year

Or $569 a year with yearly billing.

About $47.42 a month. Saves $139 a year against monthly billing.

Choose Business Choose Business
  • Higher than the plan before: 25 domains
  • Higher than the plan before: 3,000,000 banner loads a monthThen $0.21 per extra 1,000
  • Included: Unlimited vendors
  • Included: Consent log kept 730 days (24 months)
  • Included: Ongoing regulation monitoring
  • Included: Strict consent logic: the consent banner asks every visitor
  • Included: Google Consent Mode v2 and Microsoft Consent Mode
  • Included: Global Privacy Control (GPC)
  • Included: Preferences Center
  • Included: Consent log export
  • Included: JavaScript callbacks when a visitor accepts or declines
  • Included: Standard consent logic: banner rules by visitor location
  • Included: Geolocation rules managed by TermsFeed
  • Included: Multi-language banner
  • Included: Custom banner colors beyond the light and dark palettes
  • Included: Remove TermsFeed branding
  • Included: Full consent analytics
  • Plus
  • Higher than the plan before: 25 domains
  • Higher than the plan before: 3,000,000 banner loads a monthThen $0.21 per extra 1,000
  • Included: Overage 30% lower than Pro

Prices in US dollars (USD). Cancel your subscription anytime.

Helping businesses since 2012 Free plans available Monthly or yearly billing Cancel anytime

Helping businesses since 2012.

Over 1.9 million customers have created a legal agreement with TermsFeed.

It makes creation of a long Terms and Conditions easier by just putting the important details and ticking some boxes.
CEO Information Technology and Services 50-100 Employees G2 ·
Excellent. Very Happy. TermsFeed gave me everything I needed with minimal effort on my part. Their support team is great and able to troubleshoot and make any changes that are needed for your site. Even with email support, Customer Support is very responsive. I have total confidence in using this service and their support.
CEO Information Technology and Services 1-10 Employees Capterra ·
Elegant solution, reasonable cost and fantastic support.
Managing Partner Information Technology and Services 1-10 Employees Capterra ·
Great Service! 10 out of 10 experience with them. Very fast and easy to use system. Very quick turnaround times with customer support and super easy system to use.
CEO Airlines/Aviation 1-10 Employees Capterra ·
Termsfeed is really easy to use. I don't need any legal knowledge to create legal documents. It might be pricey for small companies and startups.
Application Development Analyst Information Technology and Services 50-100 Employees G2 ·
TermsFeed is very easy to use with user-friendly interface. It helps me to draw out the Terms & Conditions along with Privacy Policies for the business and stay in grounds with the regulations and compliance. The cookie content for websites is very easy to manage with TermsFeed. The technical support team is great in assisting the users. A little expensive than the other similar products available in the market. The payment interface should be updated to be more clear to the users.
Java Software Developer Information Technology and Services 50-100 Employees G2 ·
TermsFeed is easy to use and understand. TermsFeed has great customer service and offers many features.
CRA Misc 1-50 Employees G2 ·
Excellent customer support! Fully functional system at low cost. Easy to understand.
Operations Director Design 1-10 Employees Capterra ·

Capterra reviews constitute the subjective opinions of individual end users based on their own experiences and do not represent the views of Capterra or its affiliates.

Frequently asked questions about the CCPA+CPRA.

Answers to the questions small businesses ask about California privacy law, opt-outs and Global Privacy Control.

Does the CCPA apply to my small business?

The CCPA+CPRA applies to your small business only when it meets 1 of 3 thresholds. A business meets the revenue threshold with annual gross revenue above $25 million, adjusted for inflation. Buying, selling or sharing the personal information of 100,000 or more consumers or households a year meets another. The last covers a business that earns 50% or more of annual revenue from selling or sharing personal information (Cal. Civ. Code §1798.140(d)).

A business below every threshold still needs a Privacy Policy under the California Online Privacy Protection Act (CalOPPA) when the business collects personal information from California residents.

Does the CCPA require a cookie banner?

Do I have to honor Global Privacy Control?

Yes, a business under the CCPA+CPRA has to treat Global Privacy Control as a valid request to opt out of sale and sharing. Section 7025 of the CCPA regulations (Cal. Code Regs. tit. 11) sets this rule.

Global Privacy Control (GPC) is a signal the browser sends for the visitor. Browsers such as Brave and Firefox support the signal. Privacy Consent reads the signal on every plan, and non-essential vendors stay off for that visitor until the visitor chooses otherwise.

What is the difference between the CCPA and the CPRA?

The California Privacy Rights Act (CPRA) is a 2020 ballot measure that amended the CCPA from January 1, 2023. Together they now work as one law, which TermsFeed writes as CCPA+CPRA.

The CPRA added the right to correct personal information and the right to limit the use of sensitive personal information. It extended the opt-out to sharing for cross-context behavioral advertising, and created the California Privacy Protection Agency to enforce the law.

Privacy Consent adds a Limit the Use of My Sensitive Personal Information toggle to the Your Privacy Choices section for US visitors when a vendor processes sensitive data.

Is there a free way to add a Do Not Sell link?

More solutions.

Each solution page lists what a law or a platform asks of your website, and which TermsFeed product covers each part.

GDPR Consent from visitors in the EU before cookies load, with a Privacy Policy and a record of every consent. UK GDPR Consent before cookies under PECR, the 2026 analytics exception, and a Privacy Policy for UK visitors. US state privacy laws Opt-outs, Global Privacy Control and privacy notices for the 19 US states with privacy laws in effect. Canada (PIPEDA and Law 25) PIPEDA consent and Quebec Law 25, with tracking off until Quebec visitors agree. Switzerland (FADP) The FADP privacy notice and the Swiss cookie rules, with opt-in consent for Swiss visitors. LGPD (Brazil) Visitors from Brazil get clear privacy information, a reject button and revocable consent. COPPA The privacy notice for websites and apps aimed at children under 13, and the 2025 rule changes. Shopify Privacy Consent in your theme, connected to the Shopify Customer Privacy API. WordPress Privacy Consent on any WordPress theme, the WordPress Consent API, and free legal pages with AutoTerms. Wix Privacy Consent in Wix Custom Code, with the Wix cookie banner turned off. Squarespace Privacy Consent in Squarespace Code Injection, and Squarespace Analytics in your Cookies Policy. Webflow Privacy Consent in the Webflow Head code, with embeds that wait for consent. Online stores A Privacy Policy, a Return and Refund Policy and a consent banner for stores that sell online. SaaS Terms and Conditions, a Privacy Policy and a consent banner for software sold by subscription. Mobile apps The Privacy Policy and EULA that the Apple App Store and Google Play ask for. Global Privacy Control The browser opt-out signal 10 US states require, honored by Privacy Consent on every plan. Google Consent Mode v2 Consent signals for Google Ads and Google Analytics 4, sent from Privacy Consent with code from the docs.