← Help center
Global Privacy Control (GPC)
Global Privacy Control is a browser-level “do not sell/share” signal recognized as the authoritative opt-out in California (CCPA / CPRA), Colorado, Connecticut, Oregon, and a growing list of US states. When your browser sends Sec-GPC: 1, goldenhour honors it without needing any additional preference toggle.
What we do when GPC is on
- Our middleware reads
Sec-GPC: 1and sets a session cookiegh_gpc_honored=1. - Product analytics (PostHog) and downstream behavioral tracking no-op for the request. Stripe + Sentry still run for service delivery and error reporting (CCPA service- provider exemption).
- Every page footer renders an “Opt-Out Honored” indicator so you can verify the signal in one glance.
How to enable GPC
Native support:
- Firefox:Preferences → Privacy & Security → enable “Tell websites not to sell or share my data.”
- Brave: on by default.
- DuckDuckGo Browser: on by default.
Via extension (Chrome / Edge / Safari):
- globalprivacycontrol.org lists every up-to-date extension that injects the header.
Verifying the opt-out
- Enable GPC in your browser settings (above).
- Reload our home page.
- Scroll to the footer. You should see “Global Privacy Control honored” under the legal links.
- DevTools → Application → Cookies should show
gh_gpc_honored=1.
Related: /privacy · /privacy/do-not-sell · /trust