California Consumer Privacy Act (CCPA)
The California Consumer Privacy Act ("CCPA") is a law on data protection and privacy covering all individuals within the US state of California. This law went into effect January 1, 2020, and aims primarily to give control to citizens and residents over their personal data by granting them the right to view and/or delete all personal data in possession by any company, with some exceptions, and opt out
of having their personal data "sold" in the future.
The law protects every Calfornia citizen when they visit your web site, no matter where you, your web site, or your business is located. Hence, our default privacy settings are strict and the only "personal data" logged by default is a randomly generated Unique ID (UID) stored in a cookie. This cookie does not identify who a visitor is or reveal anything else about them, it is simply a unique identifier.
The CCPA is an "opt-out" law, meaning it does not restrict companies from tracking and selling your personal data by default (vs the GDPR
, which requires an "opt-in"). However, both laws require companies to allow you to view and delete your personal data upon request, amongst other things.
We are not lawyers and this is not legal advice. Consult your attorney.