Is GPC the same as Do Not Track?

It is the successor to DNT. The difference: GPC has legal teeth in California under CCPA.

Do I need a cookie banner if I honor GPC?

GPC does not replace consent banners in regions that require them, but it does satisfy CCPA opt-out for that visitor.

What is GPC compliance and how do you honor it?

Global Privacy Control (GPC) is a privacy signal sent by the browser via a header (Sec-GPC: 1) and a DOM property (navigator.globalPrivacyControl). When set, the user is opting out of the sale or sharing of personal information.

Quick answer

Detect the signal on every request. If true, treat it as a valid CCPA opt-out: disable tracking, advertising cookies, and any sale or sharing of personal data for that visitor.

How to detect it

// Client-side
if (navigator.globalPrivacyControl) {
  // skip analytics, advertising, identification
}

// Server-side
const gpc = req.headers["sec-gpc"] === "1";

What SiteSonar does

SiteSonar is GPC and CCPA aware. When the signal is present, visitor identification, advertising signals, and conversion routing personalization are suppressed for that session. Read the SiteSonar security page →