How the “Do Not Sell or Share” option works

The “Do Not Sell or Share My Personal Information” option is a required feature under several US state privacy laws (e.g., CPRA, CPA, CTDPA) that grants users the right to opt out of the sale or sharing of their personal data.

In CookieHub, this functionality is managed through the IAB Global Privacy Platform (GPP) framework and is presented as part of the Personal data section in the Preference Center.

When is this option shown?

The “Allow sale and sharing of personal information” checkbox is shown to users only when:

• The user is located in a region where the IAB GPP framework is selected
• The region’s framework setting is configured to use IAB GPP in your CookieHub dashboard

This checkbox is never shown when using other frameworks (such as CookieHub or IAB TCF 2.2).

How the user interacts with it

There are two layers to this functionality:

1. First layer dialog (optional link)

To provide users with visible access to opt-out functionality, you can enable a link labeled “Do Not Sell or Share My Personal Information” in the initial consent dialog.

• When clicked, it opens the Preference Center directly at the Personal data tab.

To enable this:

1. Go to Dashboard → Domain list → Settings
2. Click Customize for the region using IAB GPP
3. Open the Preference Center tab
4. Check the box for Show personal data tab
5. In the banner/notice tab, enable the action: Do not sell (link)

2. Preference Center → Personal data tab

This section presents the actual opt-out control as a checkbox labeled:

Allow sale and sharing of personal information

• This checkbox is enabled by default
• If the user unchecks it, CookieHub interprets it as an opt-out request
• This preference is reflected in both the IAB GPP string and the US Privacy (USP) string

What happens when the user opts out?

When the user unchecks Allow sale and sharing of personal information, or when CookieHub receives a valid Global Privacy Control (GPC) signal:

1. The IAB GPP string is updated to reflect the opt-out for:
   • Sale of personal information
   • Sharing for cross-context behavioral advertising
2. The IAB US Privacy (USP) string is also generated for backward compatibility
3. (Optional) CookieHub can be configured to automatically opt out specific cookie categories, such as:
   • Marketing
   • Analytics

This ensures that both vendor signals and local tracking behavior reflect the user’s opt-out status.

How to configure cookie category opt-outs

If you want CookieHub to disable services or cookie categories automatically when users opt out:

1. Go to Customize for the region using IAB GPP
2. Open the Preference Center tab
3. Under Opt-out category mapping, select the categories (e.g., Marketing, Analytics) to disable when the user unchecks the box

This allows local behavior changes in addition to vendor-facing signals.

Summary

Related content

• Comply with US state privacy laws
• Respect Global Privacy Control (GPC)
• IAB GPP