California and other US states
CCPA/CPRA and US state laws
We act as your service provider (or processor, in states that use that term). We don't sell or share personal information for cross-context behavioral advertising, and we honor Global Privacy Control and Do Not Track signals by default.
Our reasoning
Service provider terms
Our terms restrict us to processing data to provide the service, and prohibit selling it, sharing it for advertising, or combining it with other data.
Global Privacy Control
GPC is a legally recognized opt-out signal in California, Colorado and several other states. Privatus Analytics doesn't record visits from browsers that send GPC or Do Not Track, unless you change the site setting.
State laws covered
Our approach is designed to fit the comprehensive state laws in effect, including Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, Iowa, Delaware, New Jersey, New Hampshire, Tennessee, Minnesota, Maryland, Indiana, Kentucky and Rhode Island.
Children
We don't knowingly process children's personal information, and there are no identifiers to link visits to a child.
Where the law is uncertain
State laws differ in definitions and thresholds, and new laws take effect every year. Whether aggregated analytics data is "personal information" varies by state.
Template privacy-policy paragraph
Adapt it to your setup and have it reviewed. For a version matched to your settings, use the generator.
This is general information about how Privatus Analytics works and how we read the law. It is not legal advice. Laws and regulators' guidance change, and your obligations depend on your whole setup, so check your position with your own counsel.