AllyProof

Free California privacy check · CCPA/CPRA

Check your California privacy surface

See what a California visitor can observe: privacy disclosures, consumer request paths, opt-out controls, and Global Privacy Control handling. No account required for the preview.

United States — California

California scope: privacy notices and request methods, sale/share and sensitive-data choices, and GPC response. The browser runs from California.

  • Runs from California
  • GPC enabled
  • No account required
  • Not legal advice

What the California check reviews

Each result describes visible evidence, not a blanket compliance verdict.

California privacy disclosures

Looks for disclosed information categories, sources, purposes, recipients, and California consumer rights.

Notice at collection

Reviews whether collection-time notice signals and a route to fuller disclosures are visible.

Consumer request methods

Looks for visible methods to submit access, deletion, and correction requests.

Do Not Sell or Share

Checks for a visible sale/share opt-out path or an alternative privacy-choice mechanism.

Limit sensitive information

Looks for a Limit the Use of My Sensitive Personal Information control when the site's visible practices suggest it may apply.

Global Privacy Control

Sends the GPC signal from California and looks for visible acknowledgement that the preference was processed.

Policy update date

Checks whether the privacy policy exposes a recent effective or last-updated date.

What an automated check cannot decide

Whether the CCPA applies depends on the business, thresholds, data practices, exemptions, and relationships—not only the website. Contracts, data maps, offline practices, identity verification, and actual request fulfillment require human review.

California compliance check FAQ

Does this prove CCPA or CPRA compliance?

No. It tests specific, observable website conditions and reports evidence. It cannot determine business applicability, exemptions, contracts, internal data handling, or how requests are fulfilled.

Does the browser actually run in California?

Yes. California reviews are hard-routed to AllyProof browser workers in San Jose or Los Angeles. If California capacity is unavailable, the check fails instead of silently running from another jurisdiction.

What is Global Privacy Control?

GPC is a browser signal expressing an opt-out privacy preference. The check sends the signal and looks for visible evidence that the website recognized or processed it.

Is this an all-US privacy-law check?

No. This page is scoped to California's CCPA/CPRA surface. It does not claim coverage of other state privacy laws or federal requirements.