Why it matters
Under the CCPA, sharing personal information for cross-context behavioural advertising counts as "sharing", and businesses covered by the law must offer a clear way to opt out and honour browser opt-out signals such as Global Privacy Control. Several other US states have similar rules. These laws only apply above size thresholds, so check whether yours does.
How Patch checks
We look for ad and retargeting services on your site ({services}) and for a link with wording like "Do Not Sell or Share" or "Your Privacy Choices".
How to fix it
- If the CCPA applies to you, add a "Do Not Sell or Share My Personal Information" (or "Your Privacy Choices") link in the footer.
- Make it turn off the trackers Patch found for that visitor.
- Treat a Global Privacy Control signal from the browser as the same opt-out.
Your own report goes further: it names the exact pages, services and settings Patch found on your site, and with a full report you get a fix prompt to paste into Lovable, Bolt or Cursor.
Where this applies
California and several other US states, each only above its own thresholds.