1. Our commitment
Under the California Consumer Privacy Act (CCPA), the California Privacy Rights Act (CPRA), and the growing number of US state privacy laws (Virginia, Colorado, Connecticut, Montana, and others), consumers have the right to opt out of the "sale" or "sharing" of their personal information.
ShieldConsent does not sell or share personal information as defined by these laws. This applies to both our Website (shieldconsent.com) and our Software (the ShieldConsent plugin).
2. What "sale" and "sharing" mean
Under CCPA/CPRA, a "sale" is any exchange of personal information for monetary or other valuable consideration. "Sharing" means making personal information available to a third party for cross-context behavioral advertising.
We do neither. Specifically:
- We do not sell personal information to data brokers, advertisers, or any third party.
- We do not share personal information with third parties for targeted advertising.
- We do not use third-party analytics or advertising trackers on our Website.
- We do not disclose personal information in exchange for monetary or non-monetary consideration.
3. The Website (shieldconsent.com)
When you visit our Website, we collect only what is necessary to operate the service:
- Essential cookies for consent preferences and authentication.
- Server logs for security (retained 12 months, then deleted).
- Information you voluntarily provide (contact form, purchase).
We do not use Google Analytics, Facebook Pixel, or any marketing or behavioral tracking on our Website. There are no third-party advertising cookies.
4. The Software (ShieldConsent plugin)
The ShieldConsent plugin is 100% self-hosted. All consent data collected by the plugin on your website is stored exclusively in your WordPress database. We have no access to it.
The only outbound connections are license verification and update checks (transmitting only your license key, site URL, and plugin version — no visitor data). See our Privacy Policy for full details.
5. Global Privacy Control (GPC)
We respect the Global Privacy Control signal. If your browser sends a GPC signal (Sec-GPC: 1), we treat it as a valid opt-out request under CCPA §999.315(d) and applicable state laws.
Since we do not sell or share personal information, the GPC signal does not change our behavior — but we honor it as a matter of principle.
6. Your rights
Depending on your jurisdiction, you may have the right to:
- Know what personal information we collect and how it is used.
- Delete your personal information.
- Opt out of the sale or sharing of your personal information.
- Non-discrimination — exercise your rights without receiving a lesser service.
- Correct inaccurate personal information.
- Limit the use of sensitive personal information.
We do not discriminate against individuals who exercise their privacy rights.
7. How to submit a request
Even though we do not sell or share personal information, you can contact us at any time to exercise your rights or ask questions about our data practices:
- Email: info@shieldconsent.com
We will respond to verifiable requests within 45 days, as required by CCPA. If we need additional time, we will notify you of the extension and the reason.
8. Changes to this page
We may update this page as privacy laws evolve. Changes will be posted here with an updated date. Our commitment to not selling or sharing personal information will not change.