The California Consumer Privacy Act (CCPA, as amended by CPRA) gives California residents the right to opt out of the sale or sharing of their personal data. Zenovay does not sell personal data and does not share it for cross-context behavioural advertising — but you still have the right to send the opt-out signal, and we'll honour it.
What "sale" and "sharing" mean under CCPA
- Sale — exchanging personal data for money or other valuable consideration. Zenovay does not do this.
- Share — disclosing personal data to a third party for cross-context behavioural advertising. Zenovay does not do this.
Even though neither applies to our processing, the opt-out signal still acts as a clear "do not process my data for analytics" preference, and we treat it accordingly.
Three ways to opt out
1. Send the GPC signal (easiest)
The Global Privacy Control (GPC) is a browser-level signal that says "opt me out of sale/share". Zenovay honours it automatically — no action needed in our dashboard. To enable it:
- Brave: on by default.
- Firefox: install the GPC extension or enable the about:config flag
privacy.globalprivacycontrol.enabled. - DuckDuckGo Privacy Browser: on by default.
- Safari: install a GPC-supporting privacy extension.
When you visit a Zenovay-tracked site with GPC enabled, our backend reads the Sec-GPC: 1 header and turns off enrichment, scoring, and any optional processing for that visit.
See GPC details for the full mechanism.
2. Reject the cookie banner
If a site has the Zenovay cookie banner enabled, choose Essential only when prompted. This sets a 365-day preference cookie locally and stops the marketing pixel from loading. Zenovay's own analytics tracker continues in cookieless mode (in-memory window-scoped IDs only — no cookies, no localStorage).
3. Email a deletion request
If you want all of your past Zenovay-collected data erased, not just future opt-out, send an email to privacy@zenovay.com from the address tied to your account. Include:
- Your account email (if you have a Zenovay login)
- The website domain you visited (if you're a website visitor, not a customer)
- A clear request: "I am a California resident exercising my CCPA right to delete personal data."
We respond within 45 days, the CCPA-mandated window. For most requests, we delete within 7-14 days and email you confirmation.
What about authorised agents?
CCPA allows authorised agents to submit requests on your behalf. If you're using one, attach the signed authorisation document to the deletion request email. We may verify the authorisation by contacting you at the email address on file.
Verifying the opt-out worked
After exercising any of the three options:
- For GPC: the Zenovay tracker stops enrichment immediately on the next page load. There's no in-browser confirmation; the change is server-side.
- For banner reject: cookie inspector should show no
_zv_cookies persisting. - For email deletion: you'll receive a confirmation email within 14 days, with a list of the data sets that were deleted.
Plan applicability
The opt-out rights apply regardless of whether the website you're visiting is on the Free, Pro, Scale, or Enterprise plan. CCPA rights belong to the consumer, not to the website operator's tier.