--- title: "Global Privacy Control: test your agent website's response" description: "Test Global Privacy Control across your agent website, seller forms, buyer inquiries, analytics, and embedded listing search. Save evidence of the result." canonical: "https://scalewithsearch.com/articles/global-privacy-control-agent-website-test" --- ## Site navigation - [Scale With Search](https://scalewithsearch.com/) - Services - Services - [AI systems](https://scalewithsearch.com/ai-systems) - [Site build](https://scalewithsearch.com/work#site-build) - [Whole website fix](https://scalewithsearch.com/work#whole-website-fix) - [Content library with SEO](https://scalewithsearch.com/work#content-library) - [Working session](https://scalewithsearch.com/audit) - Start here - [Send your brief](https://scalewithsearch.com/work#send-your-brief) - [Example scope](https://scalewithsearch.com/work#review-the-example-scope) - [Prices and terms](https://scalewithsearch.com/work#prices-and-terms) - Industries - Real estate - [Real estate agents and teams](https://scalewithsearch.com/for/real-estate) - [Platforms, ownership, and IDX](https://scalewithsearch.com/for/real-estate/real-estate-website-platforms-ownership-idx) - [Search, content, and AI](https://scalewithsearch.com/for/real-estate/real-estate-search-content-ai) - [Inquiries, campaigns, and handoffs](https://scalewithsearch.com/for/real-estate/real-estate-website-inquiries-campaigns-handoffs) - [Buyer, seller, and local pages](https://scalewithsearch.com/for/real-estate/real-estate-buyer-seller-local-resources) - [Rules, privacy, and trust](https://scalewithsearch.com/for/real-estate/real-estate-website-rules-privacy-trust) - Browse by business - [Trades and home services](https://scalewithsearch.com/for/#group-trades) - [Health, wellness, and animal care](https://scalewithsearch.com/for/#group-practices) - [Law, finance, and IT](https://scalewithsearch.com/for/#group-professional) - [Marketing and SEO agencies](https://scalewithsearch.com/for/#group-agencies) - [Shops and manufacturers](https://scalewithsearch.com/for/#group-manufacturing) - [Restaurants, shops, studios, and nonprofits](https://scalewithsearch.com/for/#group-local-services) - Chiropractic practices - [Chiropractic and wellness practices](https://scalewithsearch.com/for/chiropractic-and-wellness-practices) - [Chiropractic and physical therapy clinics](https://scalewithsearch.com/for/chiropractic-and-physical-therapy-clinics) - [All industries](https://scalewithsearch.com/for/) - Resources - Free tools - [AI readiness check](https://scalewithsearch.com/check) - [Free tools](https://scalewithsearch.com/tools/) - [Free Starter Kit](https://scalewithsearch.com/kit/business-memory-starter-kit.zip) - Guides - [AI-native library](https://scalewithsearch.com/ai-native) - [Industry intelligence](https://scalewithsearch.com/intelligence) - [Office job guides](https://scalewithsearch.com/guides/) - [Business memory](https://scalewithsearch.com/articles/business-memory-for-ai-agents-guide) - [Agent governance](https://scalewithsearch.com/articles/ai-agent-governance-guide-small-business) - [Migration and ownership](https://scalewithsearch.com/articles/leaving-vendor-ai-memory-guide) - Articles - [All articles](https://scalewithsearch.com/articles/) - [What changed](https://scalewithsearch.com/changes/) - About - Evidence - [Proof](https://scalewithsearch.com/proof) - Scale With Search - [About](https://scalewithsearch.com/about) - [How it works](https://scalewithsearch.com/how-it-works) # Global Privacy Control: test your real estate website's response Global Privacy Control (GPC) sends a browser preference to stop certain sale or sharing of personal information. California's attorney general says covered businesses must honor it. On your agent website, test the resulting data handling alongside seller and buyer inquiries. [California DOJ GPC guidance](https://oag.ca.gov/privacy/ccpa/gpc), checked October 13, 2026. Start with a written expected result for each service. Then check the signal, the site's response, outside vendors, and inquiry delivery. A privacy message on the page is one observation. Require evidence for the behavior behind it. This article is general information, not legal advice. Applicability depends on the business and state. Confirm the duties and data classifications with an attorney. Scale With Search provides website services and does not give legal advice. ## Separate the browser signal from the legal decision The W3C GPC Working Draft dated September 24, 2026 describes `Sec-GPC: 1` in HTTP requests and `navigator.globalPrivacyControl` in JavaScript. It remains a draft technical specification. GPC does not exercise every privacy right, including deletion. [W3C GPC, sections 1 and 3](https://www.w3.org/TR/2026/WD-gpc-20260924/). Use those distinctions in the brief. Do not treat a missing signal as permission to start every tracker. Keep deletion requests, email subscriptions, and permission for marketing calls outside this test's acceptance decision. For California, the regulations effective January 1, 2026 require covered businesses that sell or share personal information to process qualifying opt-out signals. Section 7025(c) covers the browser or device, associated profiles, and the consumer when known. It prohibits requiring extra information beyond what is necessary to send the signal. It also requires a display of whether the signal was processed. A previous site setting allowing sale or sharing does not automatically override GPC. [11 CCR § 7025(b), (c)(1)–(3), and (c)(6)](https://cppa.ca.gov/regulations/pdf/ccpa_statute_eff_20260101.pdf#page=44), effective January 1, 2026; checked October 13, 2026. Colorado's attorney general states that covered businesses must permit GPC opt-outs of data sale or targeted advertising beginning July 1, 2024. This applies within the Colorado Privacy Act's application thresholds. [Colorado AG universal opt-out guidance, citing C.R.S. § 6-1-1306(1)(a)(IV)](https://coag.gov/opt-out/), checked October 13, 2026. These examples do not determine your website's duties in every state. Ask counsel to identify the relevant business entity, resident coverage, processing purposes, and vendor roles. Avoid deciding applicability from your office address alone. - [Do not sell my personal information: an opt-out link for agent websites](/articles/do-not-sell-share-agent-website-link) ## Build the test around your inquiry routes Prepare an inventory of the pages and services you actually use. Include the homepage, seller valuation page, buyer consultation page, contact form, and listing search. Add separate entries for different form providers or search domains. Use this suggested worksheet. Leave a component out when it is absent from your site. | Component | Question for the contractor | Evidence to request | | --- | --- | --- | | Website and server | Where is GPC detected, and which setting follows? | Request header and resulting preference state | | Analytics | Which approved measurement remains under GPC? | Configuration, observed requests, and stated purposes | | Advertising tools | Which sale, sharing, or targeted-advertising activity must stop under the approved rule? | Tag behavior and downstream vendor settings | | Seller form | Can the visitor request a conversation without reversing the preference? | Submission result and matching destination receipt | | Buyer inquiry | Does the question reach the intended person with the approved preference attached where needed? | Test record and receiving-side confirmation | | Embedded listing search | Does the vendor detect GPC directly or accept a documented preference instruction? | Vendor documentation and an observed test result | | Hosted search domain | What happens after the visitor leaves the agent's domain? | Separate request and behavior checks on that destination | Have counsel approve the legal classifications. Have the contractor describe the technical controls. The table proposes evidence to collect; it does not classify every analytics request or listing service as sale or sharing. For each vendor, request the account-specific configuration and its current documentation. Name who owns the change when a service falls outside the website contractor's access. ## Confirm the signal before assessing the response Run the following checks in an agreed test environment. Use a supported browser with GPC enabled. Ask the contractor to record the browser version and setting, then load the test page afresh. Inspect the page request for `Sec-GPC: 1`. Inspect `navigator.globalPrivacyControl` for a true value. These are the technical signal surfaces described in the September 24, 2026 [W3C draft, sections 3.3 and 3.4](https://www.w3.org/TR/2026/WD-gpc-20260924/). Save those observations before testing the site response. Label a manually injected header as a server diagnostic. Require a separate browser test before accepting the full visitor path. Compare a clean test session without the signal against one with GPC enabled. Keep the URL, actions, and account configuration consistent. Record storage and requests before interacting with the page, after opening listing search, and after an agreed test submission. Use the comparison to investigate the approved behavior. A missing advertising request supports a narrow observation at that time. Ask separately about server-side transmissions and vendor use of received data. Keep those items unresolved until supporting evidence arrives. ## Check embedded listing search separately Open the actual search component used on the buyer page. Repeat the test through search results, property details, and the inquiry action. If it sends visitors to another domain, test that destination too. Ask the vendor to specify how it handles the browser signal. If the site passes a preference through an API or another integration, obtain the documented field, accepted values, and an acknowledgment. Do not invent a parameter or infer support from a badge on the parent page. For an agreed embedded-service test, record the request to the vendor, its preference state, and its resulting behavior. Require the vendor to explain any continued requests against the approved purpose map. If the contractor cannot inspect the vendor's downstream processing, record that limit. Request written confirmation for the specific account and integration. Keep “documentation reviewed” separate from “behavior observed.” When support is unknown, ask counsel and the contractor to choose a temporary treatment for the affected component. Record the owner, decision, and retest condition. Do not mark the component passed because the rest of the website passed. ## Test seller and buyer inquiries with GPC enabled Use contact details you control and a clearly marked test message. Obtain the receiving team's agreement before submission. Keep real buyer or seller information out of shared screenshots. For the seller route, request the conversation offered by the page. For the buyer route, send the question offered beside the listing or consultation form. Check required fields, validation, confirmation, and the actual receiving destination. Require the recipient to find the matching message and confirm that the question and reply details arrived intact. Inspect any preference field used by the approved integration. Ask how that preference affects downstream exports or advertising audiences. Do not accept “form submitted” as proof of receipt. Do not accept a received inquiry as permission to ignore GPC. Record delivery and privacy handling as separate results. For known California consumers, section 7025(c)(5), effective January 1, 2026, says a later absence of the signal is not consent to resume sale or sharing. Include a return-session check where your system recognizes the test account. [California regulations](https://cppa.ca.gov/regulations/pdf/ccpa_statute_eff_20260101.pdf#page=46), checked October 13, 2026. ## Record a result for every component Use “passed,” “failed,” or “unresolved” against the written expected behavior. Save the page, date, browser, GPC setting, vendor configuration, relevant requests, and inquiry receipt. Name the reviewer and the source supporting each legal expectation. For California's processed-signal display, compare the visible status with the underlying preference and observed behavior. Keep this check tied to § 7025(c)(6), effective January 1, 2026, rather than treating the displayed text as a certification. [California regulations](https://cppa.ca.gov/regulations/pdf/ccpa_statute_eff_20260101.pdf#page=46). Redact personal details, credentials, and unrelated traffic before sharing evidence. Record failures beside the responsible owner and repeat the affected checks after repair. Schedule another check after a relevant form, vendor, tag, or listing-search change. A passed test documents the tested behavior and configuration. It does not establish legal compliance. Do not accept a consent tool, overlay, scanner score, or GPC badge as a promise that the website meets every applicable requirement. ## Put the evidence in your website brief Bring the affected page URLs, the vendor list, counsel's approved requirements, and the failed or unresolved test rows. Identify the buyer or seller inquiry destination and who can approve website changes. Use the [real estate website brief](/for/real-estate) to define the whole website fix and its acceptance checks. Confirm third-party work in the written scope. Keep the website repair decision grounded in the evidence you can inspect. - [Test the seller inquiry path on your real estate website](/articles/seller-inquiry-path-agent-website) - [Check your real estate website in 30 minutes](/articles/real-estate-website-audit) - [Own your real estate website: domain, hosting, editing, and leads](/articles/own-your-site) ## Related: Real estate - [Test the seller inquiry path on your real estate website](/articles/seller-inquiry-path-agent-website) - [Check your real estate website in 30 minutes](/articles/real-estate-website-audit) - [Own your real estate website: domain, hosting, editing, and leads](/articles/own-your-site) ---- ```text .|########||. .|########||. .|########||. |##||. .||##|. |##||. .||##|. |##||. .||##|. |#|. .|#|. |#|. .|#|. |#|. .|#|. |#| |#| |#| |#| |#| |#| .#| |#. .#| |#. .#| |#. .#. .#| .#. .#| .#. .#| |#. .#| |#. .#| |#. .#| |# ...... #| |# ...... #| |# ...... #| .# ||#########| #| .# ||#########| #| .# ||#########| #| .#. |######||######|. .#. .#. |######||######|. .#. .#. |######||######|. .#. #. .##|###|##|#|######| .# #. .##|###|##|#|######| .# #. .##|###|##|#|######| .# || |##|#||||||||||||#||#| || || |##|#||||||||||||#||#| || || |##|#||||||||||||#||#| || # |#||||||||||||||||||||#| #. # |#||||||||||||||||||||#| #. # |#||||||||||||||||||||#| #. || |#||||||||||||||||||||||#| || || |#||||||||||||||||||||||#| || || |#||||||||||||||||||||||#| || # .#||||||||||||||||||||||||#| # # .#||||||||||||||||||||||||#| # # .#||||||||||||||||||||||||#| # || ....|||#||||||##|#|||#|#||##||||....|. || || ....|||#||||||##|#|||#|#||##||||....|. || || ....|||#||||||##|#|||#|#||##||||....|. || #. . ....|# ....#||| ||| .#||| ....#. .# #. . ....|# ....#||| ||| .#||| ....#. .# #. . ....|# ....#||| ||| .#||| ....#. .# # . ||||#| .#####|| . .#| .#||| ||||# #. # . ||||#| .#####|| . .#| .#||| ||||# #. # . ||||#| .#####|| . .#| .#||| ||||# #. .| ||||| #. |#|||||. || #. |#||. .||||| || .| ||||| #. |#|||||. || #. |#||. .||||| || .| ||||| #. |#|||||. || #. |#||. .||||| || || |.... #. ....|#. |. ...|. ....|| || || |.... #. ....|#. |. ...|. ....|| || || |.... #. ....|#. |. ...|. ....|| || #. .||||||##||||||##||####|||||||#||||||#| .# #. .||||||##||||||##||####|||||||#||||||#| .# #. .||||||##||||||##||####|||||||#||||||#| .# # .||####|###########################|. # # .||####|###########################|. # # .||####|###########################|. # # .#||||||.#.|| # |. ..# #| #|||||#| # # .#||||||.#.|| # |. ..# #| #|||||#| # # .#||||||.#.|| # |. ..# #| #|||||#| # # .#|||||| .. |# ## |#| ...#|#|||#| # # .#|||||| .. |# ## |#| ...#|#|||#| # # .#|||||| .. |# ## |#| ...#|#|||#| # # .#|||#|# .# .#| #| ##|.#..#|||||#| # # .#|||#|# .# .#| #| ##|.#..#|||||#| # # .#|||#|# .# .#| #| ##|.#..#|||||#| # # .#||||||############|######|||||#| # # .#||||||############|######|||||#| # # .#||||||############|######|||||#| # # |...||#||||||#||||#|#||||||#|||||#||| |.| # # |...||#||||||#||||#|#||||||#|||||#||| |.| # # |...||#||||||#||||#|#||||||#|||||#||| |.| # #. .. ||||# .|||##|. |#| .|| || .|||#. #| # .# #. .. ||||# .|||##|. |#| .|| || .|||#. #| # .# #. .. ||||# .|||##|. |#| .|| || .|||#. #| # .# || | ...|| ...##| | #| .|. |. ##### .. .| || || | ...|| ...##| | #| .|. |. ##### .. .| || || | ...|| ...##| | #| .|. |. ##### .. .| || || ||||| || ||||#| . |. |. |#. ||||| |#| || || || ||||| || ||||#| . |. |. |#. ||||| |#| || || || ||||| || ||||#| . |. |. |#. ||||| |#| || || .# |.....#|....|#.||||.|||##.|#|....||.#||.#. #. .# |.....#|....|#.||||.|||##.|#|....||.#||.#. #. .# |.....#|....|#.||||.|||##.|#|....||.#||.#. #. #.|||||||#############################| ||| .# #.|||||||#############################| ||| .# #.|||||||#############################| ||| .# || ##||#||#||||||#||#||#||#||##. || || ##||#||#||||||#||#||#||#||##. || || ##||#||#||||||#||#||#||#||##. || # .#|||||||||#||#|||||||||||#| # # .#|||||||||#||#|||||||||||#| # # .#|||||||||#||#|||||||||||#| # || |#||||||||||||||||||||||#| || || |#||||||||||||||||||||||#| || || |#||||||||||||||||||||||#| || .# |#||||||||||||||||||||#| #. .# |#||||||||||||||||||||#| #. .# |#||||||||||||||||||||#| #. || |#||||||||||||||||||#| || || |#||||||||||||||||||#| || || |#||||||||||||||||||#| || #. .######|#|#########| .# #. .######|#|#########| .# #. .######|#|#########| .# .#. |#####||||#####| .#. .#. |#####||||#####| .#. .#. |#####||||#####| .#. |# ||########|| #. |# ||########|| #. |# ||########|| #. |# ...... #| |# ...... #| |# ...... #| |#. .#| |#. .#| |#. .#| |#. .#. |#. .#. |#. .#. .#| |#. .#| |#. .#| |#. |#| |#| |#| |#| |#| |#| .|#|. .|#|. .|#|. .|#|. .|#|. .|#|. |##||. .||##| |##||. .||##| |##||. .||##| .||########||. .||########||. .||########||. Scale With Search 2026 [scalewithsearch.com](https://scalewithsearch.com) ```