Global Privacy Control (GPC) lets your browser tell every website you open that you do not want your personal data sold or shared for targeted ads. You switch it on once, and the request travels with every page you load. No more hunting for a “Do Not Sell” link on each site.
Support still varies a lot between browsers. Some send the signal out of the box, one hides it behind a checkbox, and the most popular ones need an extension. This guide shows you how to turn GPC on in each major browser and how to confirm it actually works.
What Is Global Privacy Control (GPC) and How Does It Work?
GPC is a privacy preference your browser broadcasts to websites, not a blocker.
When GPC is active, your browser adds the HTTP header Sec-GPC: 1 to every request and sets the JavaScript property navigator.globalPrivacyControl to true. Websites and their consent tools read either one and treat you as opted out of data sales, data sharing, and cross-site targeted advertising.
The signal has legal weight in a growing number of US states. Colorado lists GPC as the only approved universal opt-out signal, and California regulators have already fined companies such as Sephora and Disney for mishandling opt-out requests. The W3C now develops GPC as an official specification.
Keep its limits in mind:
- GPC does not stop trackers or cookies by itself. The website has to act on it.
- It covers selling and sharing your data with third parties, not a site’s own first-party use.
- Plenty of sites still ignore it, so pair it with a tracker blocker if you want hard protection.
Which Browsers Support Global Privacy Control?
Browsers differ widely in how they handle GPC, from on by default to not supported at all, and the table below compares them.
| Browser | Native GPC | Default state | What you need to do |
|---|---|---|---|
| Brave | Yes | On | Nothing, just verify |
| DuckDuckGo browser | Yes | On | Nothing, just verify |
| Firefox | Yes (version 120+) | Off in normal windows, on in private windows | Tick one checkbox |
| Chrome | No (testing in Canary only) | Not available | Install an extension |
| Edge | No | Not available | Install an extension |
| Safari | No | Not available | Use an extension or switch browsers |
California’s Opt Me Out Act (AB 566) requires browser makers to offer a built-in opt-out signal setting from January 1, 2027, so expect Chrome, Edge, and Safari to add native toggles soon.
Method 1: How to Enable Global Privacy Control in Firefox
Firefox has the setting built in, but you must enable it yourself for normal browsing.
Steps on desktop:
- Open the Firefox menu (three lines in the top right) and click Settings.
- Select Privacy & Security in the left panel.
- Scroll down to the Website Privacy Preferences area (labeled Additional protections in some versions).
- Tick Tell websites not to sell or share my data.
- Restart Firefox.
Steps on Android (version 122 or later):
- Tap the menu and open Settings.
- Go to Enhanced Tracking Protection.
- Turn on Tell websites not to sell or share my data.
Private windows already send GPC, so this setting matters for your regular browsing sessions.
Method 2: How to Enable Global Privacy Control in Chrome
Chrome stable has no GPC switch, so an extension sends the signal for you.
- Open the Chrome Web Store and search for Privacy Badger, the free tracker blocker from the Electronic Frontier Foundation.
- Click Add to Chrome, then Add extension.
- Accept the permissions it asks for.
Privacy Badger sends GPC on every site right after installation, with no extra configuration. If you prefer a different tool, DuckDuckGo’s Search & Tracker Protection extension and OptMeowt (from Wesleyan University’s privacy lab) also send the signal.
Method 3: How to Enable Global Privacy Control in Microsoft Edge
Edge works the same way as Chrome because both run on Chromium.
- Open the Edge Add-ons store.
- Search for Privacy Badger.
- Click Get, then Add extension.
GPC starts working immediately. Privacy Badger also supports Edge on Android, and you can install Chrome Web Store extensions in Edge if you prefer another GPC tool.
Method 4: How to Enable Global Privacy Control in Safari
Safari offers no native GPC option on Mac, iPhone, or iPad.
You have two practical routes:
- Install a Safari extension that sends GPC. Check the extension’s description in the App Store for Global Privacy Control support before you install it, then enable it under Safari > Settings > Extensions.
- Switch to a browser with built-in GPC. The DuckDuckGo browser and Brave both run on macOS and iOS and send the signal by default.
Does Brave Have Global Privacy Control? How to Verify It
Brave sends GPC by default on Windows, macOS, Linux, and Android, so you only need to check that nobody turned it off.
- Type
brave://flags/#brave-global-privacy-control-enabledin the address bar and pressEnter. - Make sure the flag shows Default or Enabled. If it says Disabled, change it and relaunch Brave.
On iPhone and iPad, Apple’s platform rules limit Brave to the JavaScript property, so the Sec-GPC header does not go out there.
Does DuckDuckGo Have Global Privacy Control? How to Verify It
The DuckDuckGo browser enables GPC on every platform and gives you no switch to turn it off.
One detail matters here. On Android, iOS, and Mac, DuckDuckGo only sends GPC to websites it knows respect the signal, which helps avoid breaking pages. The Windows app and the DuckDuckGo extension for other browsers send it everywhere.
Which US States Require Websites to Honor GPC?
Twelve states now require the businesses they cover to honor opt-out signals like GPC.
The list includes California, Colorado, Connecticut, Delaware, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, and Texas, and Vermont is next in line.
These laws do not hit every website. They apply to businesses that meet a state’s size test and sell data or run targeted ads, and many small sites without ad pixels fall outside them. As a visitor, you can send the signal no matter where you live.
How to Check If Global Privacy Control Is Working
Run one of these quick tests after you set up any browser.
Use the official test page:
- Visit globalprivacycontrol.org in the browser you configured.
- Look at the banner at the top. It should read GPC signal detected.
Use the browser console:
- Open any website and press
F12(orCmd + Option + Ion Mac) to open developer tools. - Click the Console tab.
- Type
navigator.globalPrivacyControland pressEnter.
A result of true means the signal is active. false means your browser supports GPC but it is switched off, and undefined means the browser has no support at all.
Is GPC the Same as an Ad Blocker or Do Not Track?
These tools sound similar but work in very different ways.
- Ad and tracker blockers stop scripts from loading on your device. They protect you even on sites that ignore privacy laws, but they sometimes break logins, videos, or checkout pages.
- GPC sends a legal request and blocks nothing. Pages keep working normally, but you rely on the site to obey.
- Do Not Track was the older header with the same goal. No law backed it, most sites ignored it, and Firefox and Safari later removed it. GPC replaces it with a narrower request that state laws actually enforce.
For the strongest setup, run GPC together with a tracker blocker. Privacy Badger handles both jobs in one extension.
Frequently Asked Questions
Does GPC work outside the United States?
GPC works technically everywhere, but its legal force comes mainly from US state laws. In the EU, the GDPR does not name GPC, and websites still need your consent before setting non-essential cookies whether or not you send the signal.
Will enabling GPC break websites?
No. GPC only sends a request, so websites load and behave the same way. Breakage usually comes from blockers, not from the GPC signal.
Does GPC stop the website I visit from collecting my data?
No. GPC targets selling and sharing your data with third parties and cross-site ad targeting. The site can still collect and use data for its own purposes.
Do I need GPC if I use incognito mode?
Incognito only skips saving history and cookies on your device. It does not tell websites anything about your data choices, except in Firefox, which sends GPC in private windows automatically.
Can a website ask me to override GPC?
Yes. A site can ask for your specific consent to share data despite the signal, but laws in states like California and Colorado limit how often and how aggressively it can ask.
