California CCPA/CPRA Privacy Policy Generator

Selling versus sharing under the CCPA as amended

The distinction trips up most businesses. 'Sale' means disclosing personal information for monetary or other valuable consideration. 'Sharing' means disclosing it for cross-context behavioural advertising — which is what most advertising pixels do, even when no money changes hands. A site running ad personalisation usually needs a 'Do Not Sell or Share My Personal Information' link even if it has never sold data.

• Categories of personal information collected in the last 12 months
• Purposes, and categories of third parties receiving each
• Whether you sell or share, and the opt-out route
• Sensitive personal information and any limit-use right
• Rights to know, delete, correct, and non-discrimination
• Recognition of the Global Privacy Control opt-out signal

Thresholds and other US state laws

Not every business is covered — the CCPA applies based on revenue, volume of California consumers, or deriving significant revenue from selling or sharing personal information. Because a growing set of states now have comparable laws with similar rights, many businesses write one US-wide section rather than a California-only one.