Global Privacy Control

Global Privacy Control, honored on every plan.

Global Privacy Control (GPC) is a browser signal that asks your website not to sell or share visitor data. Privacy Consent reads the signal and turns off non-essential vendors.

Create your consent banner Read the GPC guide
CCPA+CPRAUS state privacy laws

By framework

The states that require Global Privacy Control.

10 US states require businesses to treat a universal opt-out signal as a request to opt out. Global Privacy Control is the signal these states recognize.

US states that require websites to honor Global Privacy Control, with the date and the legal basis
StateRequired fromWhere it comes from
California Since 2020 CCPA regulations, Cal. Code Regs. tit. 11, §7025
Colorado July 1, 2024 Colorado Privacy Act, C.R.S. §6-1-1306, and Rule 5 of the Attorney General
Connecticut January 1, 2025 Connecticut Data Privacy Act
Texas January 1, 2025 Texas Data Privacy and Security Act, §541.055(e)
Montana January 1, 2025 Montana Consumer Data Privacy Act
New Hampshire January 1, 2025 New Hampshire privacy law, RSA 507-H
New Jersey July 15, 2025 New Jersey Data Privacy Act
Minnesota July 31, 2025 Minnesota Consumer Data Privacy Act
Oregon January 1, 2026 Oregon Consumer Privacy Act
Delaware January 1, 2026 Delaware Personal Data Privacy Act

How Privacy Consent handles Global Privacy Control.

TermsFeed Privacy Consent reads Global Privacy Control for every visitor, and the signal overrides the consent logic and earlier consent.

  • Every region, every plan

    Privacy Consent honors Global Privacy Control for every visitor on every plan, with Standard or Strict consent logic.

  • Earlier consent reversed

    On the next visit, Privacy Consent turns off a consent given before the browser sent the signal, and saves it as an opt-out.

  • The visitor still decides

    The consent banner tells the visitor the signal was honored. A visitor who then accepts vendors keeps that choice.

  • Recorded in the consent log

    The consent log records whether each visitor sent Global Privacy Control, next to the consent choice.

  • Read from the browser request

    TermsFeed reads the signal from the browser request, so the consent banner arrives with the signal applied.

  • One Your Privacy Choices link

    Privacy Consent shows US visitors a Your Privacy Choices link with the California opt-out icon, which opens the opt-out choices in the Preferences Center.

What the laws ask

What privacy laws expect, and how TermsFeed covers it.

California and Colorado enforce Global Privacy Control, and California has fined businesses that ignored the signal. Each row names the law, when it applies and the part TermsFeed handles.

Consent laws, what is at stake and how Privacy Consent covers each one
Law Applies when What it can cost How TermsFeed covers it
CCPA+CPRA California A for-profit business above the CCPA thresholds collects personal information from California residents. Up to $2,500 per violation, or $7,500 per intentional violation or violation involving the data of a minor, as set in Cal. Civ. Code §1798.155, adjusted for inflation.
  • Honors Global Privacy Control signals
  • Your Privacy Choices link to opt out
CPA Colorado A business processes the data of 100,000 or more Colorado consumers, or 25,000 and earns revenue from selling data. Up to $20,000 per violation, enforced by the Attorney General and the district attorneys.
  • Honors Global Privacy Control signals
  • Your Privacy Choices link to opt out

A summary for orientation, not legal advice.

How Privacy Consent compares.

Free cookie plugins cover the basics, and doing it yourself means adding every script block and consent rule by hand. Privacy Consent keeps the rules for each region current, with a free plan to start.

Free cookie plugins, doing it yourself and TermsFeed Privacy Consent compared
Feature Free cookie plugins Doing it yourselfBanner and scripts coded by hand TermsFeed Privacy Consent
Price Free No fee, only your time Free plan. Paid plans from $9 a month
Global Privacy Control Rarely Manual Yes, on every plan
Rules by visitor location Rarely Rarely Yes, from the Starter plan
Consent log Varies Rarely Yes, with export on every plan
Works on any website Varies Yes Yes

Privacy Consent plans.

Every plan honors Global Privacy Control and includes the consent log and the Preferences Center. Paid plans add rules by visitor location managed by TermsFeed, more banner loads and more domains.

Billing period

Switch to yearly to pay less.

Billed once a year.

Free

One small website that needs a consent banner.

$0 / month / year

Start for free
  • Included: 1 domain
  • Included: 15,000 banner loads a month
  • Included: 10 vendors
  • Included: Consent log kept 180 days
  • Included: Ongoing regulation monitoring
  • Included: Strict consent logic: the consent banner asks every visitor
  • Included: Google Consent Mode v2 and Microsoft Consent Mode
  • Included: Global Privacy Control (GPC)
  • Included: Preferences Center
  • Included: Consent log export
  • Included: JavaScript callbacks when a visitor accepts or declines
Standard consent logic starts here

Starter

A business website with visitors from several countries.

$9 / month

$89 / year

Or $89 a year with yearly billing.

About $7.42 a month. Saves $19 a year against monthly billing.

Choose Starter Choose Starter
  • Included: 1 domain
  • Higher than the plan before: 125,000 banner loads a monthThen $0.30 per extra 1,000
  • Higher than the plan before: 25 vendors
  • Higher than the plan before: Consent log kept 730 days (24 months)
  • Included: Ongoing regulation monitoring
  • Included: Strict consent logic: the consent banner asks every visitor
  • Included: Google Consent Mode v2 and Microsoft Consent Mode
  • Included: Global Privacy Control (GPC)
  • Included: Preferences Center
  • Included: Consent log export
  • Included: JavaScript callbacks when a visitor accepts or declines
  • Plus
  • Higher than the plan before: 125,000 banner loads a monthThen $0.30 per extra 1,000
  • Higher than the plan before: 25 vendors
  • Higher than the plan before: Consent log kept 730 days (24 months)
  • Included: Standard consent logic: banner rules by visitor location
  • Included: Geolocation rules managed by TermsFeed
  • Included: Multi-language banner
  • Included: Custom banner colors beyond the light and dark palettes
  • Included: Remove TermsFeed branding
  • Included: Basic consent analytics

Pro

A growing business with several websites.

$24 / month

$229 / year

Or $229 a year with yearly billing.

About $19.08 a month. Saves $59 a year against monthly billing.

Choose Pro Choose Pro
  • Higher than the plan before: 5 domains
  • Higher than the plan before: 500,000 banner loads a monthThen $0.30 per extra 1,000
  • Higher than the plan before: Unlimited vendors
  • Included: Consent log kept 730 days (24 months)
  • Included: Ongoing regulation monitoring
  • Included: Strict consent logic: the consent banner asks every visitor
  • Included: Google Consent Mode v2 and Microsoft Consent Mode
  • Included: Global Privacy Control (GPC)
  • Included: Preferences Center
  • Included: Consent log export
  • Included: JavaScript callbacks when a visitor accepts or declines
  • Included: Standard consent logic: banner rules by visitor location
  • Included: Geolocation rules managed by TermsFeed
  • Included: Multi-language banner
  • Included: Custom banner colors beyond the light and dark palettes
  • Included: Remove TermsFeed branding
  • Plus
  • Higher than the plan before: 5 domains
  • Higher than the plan before: 500,000 banner loads a monthThen $0.30 per extra 1,000
  • Higher than the plan before: Unlimited vendors
  • Included: Full consent analytics

Business

High-traffic websites and businesses with many brands.

$59 / month

$569 / year

Or $569 a year with yearly billing.

About $47.42 a month. Saves $139 a year against monthly billing.

Choose Business Choose Business
  • Higher than the plan before: 25 domains
  • Higher than the plan before: 3,000,000 banner loads a monthThen $0.21 per extra 1,000
  • Included: Unlimited vendors
  • Included: Consent log kept 730 days (24 months)
  • Included: Ongoing regulation monitoring
  • Included: Strict consent logic: the consent banner asks every visitor
  • Included: Google Consent Mode v2 and Microsoft Consent Mode
  • Included: Global Privacy Control (GPC)
  • Included: Preferences Center
  • Included: Consent log export
  • Included: JavaScript callbacks when a visitor accepts or declines
  • Included: Standard consent logic: banner rules by visitor location
  • Included: Geolocation rules managed by TermsFeed
  • Included: Multi-language banner
  • Included: Custom banner colors beyond the light and dark palettes
  • Included: Remove TermsFeed branding
  • Included: Full consent analytics
  • Plus
  • Higher than the plan before: 25 domains
  • Higher than the plan before: 3,000,000 banner loads a monthThen $0.21 per extra 1,000
  • Included: Overage 30% lower than Pro

Prices in US dollars (USD). Cancel your subscription anytime.

Helping businesses since 2012 Free plans available Monthly or yearly billing Cancel anytime

Helping businesses since 2012.

Over 1.9 million customers have created a legal agreement with TermsFeed.

It makes creation of a long Terms and Conditions easier by just putting the important details and ticking some boxes.
CEO Information Technology and Services 50-100 Employees G2 ·
Excellent. Very Happy. TermsFeed gave me everything I needed with minimal effort on my part. Their support team is great and able to troubleshoot and make any changes that are needed for your site. Even with email support, Customer Support is very responsive. I have total confidence in using this service and their support.
CEO Information Technology and Services 1-10 Employees Capterra ·
Elegant solution, reasonable cost and fantastic support.
Managing Partner Information Technology and Services 1-10 Employees Capterra ·
Great Service! 10 out of 10 experience with them. Very fast and easy to use system. Very quick turnaround times with customer support and super easy system to use.
CEO Airlines/Aviation 1-10 Employees Capterra ·
Termsfeed is really easy to use. I don't need any legal knowledge to create legal documents. It might be pricey for small companies and startups.
Application Development Analyst Information Technology and Services 50-100 Employees G2 ·
TermsFeed is very easy to use with user-friendly interface. It helps me to draw out the Terms & Conditions along with Privacy Policies for the business and stay in grounds with the regulations and compliance. The cookie content for websites is very easy to manage with TermsFeed. The technical support team is great in assisting the users. A little expensive than the other similar products available in the market. The payment interface should be updated to be more clear to the users.
Java Software Developer Information Technology and Services 50-100 Employees G2 ·
TermsFeed is easy to use and understand. TermsFeed has great customer service and offers many features.
CRA Misc 1-50 Employees G2 ·
Excellent customer support! Fully functional system at low cost. Easy to understand.
Operations Director Design 1-10 Employees Capterra ·

Capterra reviews constitute the subjective opinions of individual end users based on their own experiences and do not represent the views of Capterra or its affiliates.

Frequently asked questions about Global Privacy Control.

Answers to the questions website owners ask about the GPC signal and the laws that require it.

What is Global Privacy Control?

Global Privacy Control (GPC) is a browser signal, sent with every request, that asks websites not to sell or share visitor data. The browser sends a Sec-GPC header, and page scripts read the navigator.globalPrivacyControl property.

Global Privacy Control is a Working Draft at the World Wide Web Consortium (W3C), and 10 US states already recognize it as an opt-out request.

Which browsers send Global Privacy Control?

Brave and DuckDuckGo send Global Privacy Control by default, and Firefox sends it by default in private browsing. Firefox has offered a setting for normal windows since version 120.

Chrome, Safari and Edge have no built-in setting, and browser extensions such as Privacy Badger add the signal. A California law requires every browser to offer an opt-out signal setting from January 1, 2027.

Do I have to honor Global Privacy Control?

Yes, you have to honor Global Privacy Control when a privacy law of California, Colorado, Connecticut, Delaware, Minnesota, Montana, New Hampshire, New Jersey, Oregon or Texas applies to your business.

These states treat the signal as a valid request to opt out of sale or targeted advertising. California fined Sephora $1.2 million in 2022, partly for ignoring the signal. The attorneys general of California, Colorado and Connecticut announced a joint review of Global Privacy Control in September 2025.

Is Global Privacy Control the same as Do Not Track?

No, Global Privacy Control has legal weight in 10 US states, and Do Not Track has none in these laws.

Privacy Consent honors Global Privacy Control. Privacy Consent records Do Not Track in the consent log, and the consent banner and vendors work the same way with or without it.

Can a visitor who sends Global Privacy Control still accept cookies?

Yes, a visitor who sends Global Privacy Control can still accept vendors in the consent banner. Privacy Consent turns non-essential vendors off first, and keeps any choice the visitor makes after that.

More solutions.

Each solution page lists what a law or a platform asks of your website, and which TermsFeed product covers each part.

GDPR Consent from visitors in the EU before cookies load, with a Privacy Policy and a record of every consent. UK GDPR Consent before cookies under PECR, the 2026 analytics exception, and a Privacy Policy for UK visitors. CCPA+CPRA A Privacy Policy, the Do Not Sell or Share link and Global Privacy Control, for California residents. US state privacy laws Opt-outs, Global Privacy Control and privacy notices for the 19 US states with privacy laws in effect. Canada (PIPEDA and Law 25) PIPEDA consent and Quebec Law 25, with tracking off until Quebec visitors agree. Switzerland (FADP) The FADP privacy notice and the Swiss cookie rules, with opt-in consent for Swiss visitors. LGPD (Brazil) Visitors from Brazil get clear privacy information, a reject button and revocable consent. COPPA The privacy notice for websites and apps aimed at children under 13, and the 2025 rule changes. Shopify Privacy Consent in your theme, connected to the Shopify Customer Privacy API. WordPress Privacy Consent on any WordPress theme, the WordPress Consent API, and free legal pages with AutoTerms. Wix Privacy Consent in Wix Custom Code, with the Wix cookie banner turned off. Squarespace Privacy Consent in Squarespace Code Injection, and Squarespace Analytics in your Cookies Policy. Webflow Privacy Consent in the Webflow Head code, with embeds that wait for consent. Online stores A Privacy Policy, a Return and Refund Policy and a consent banner for stores that sell online. SaaS Terms and Conditions, a Privacy Policy and a consent banner for software sold by subscription. Mobile apps The Privacy Policy and EULA that the Apple App Store and Google Play ask for. Google Consent Mode v2 Consent signals for Google Ads and Google Analytics 4, sent from Privacy Consent with code from the docs.