Do I need a Do Not Sell or Share link if I don’t sell data?

Many websites include the link as a precaution when they use ads, analytics, or tracking technologies that involve data sharing. It’s a common risk-reduction and trust signal.

Is this only required for California websites?

The requirement originates from California privacy law, but it can apply based on who you serve — not where your business is located.

Is this page legal advice?

No. This content is informational only and does not provide legal advice or compliance guarantees.

Home › Tools › US Website Compliance Checker › Do Not Sell or Share

What Is “Do Not Sell or Share” — And Do I Need It?

Q: What does “Do Not Sell or Share” actually mean?

It refers to giving users the ability to opt out of their personal data being sold or shared with third parties, including ad networks and analytics providers — even if no money changes hands.

“Do Not Sell or Share My Personal Information” doesn’t just apply to data brokers. It often applies to normal websites that run ads, analytics, or tracking scripts.

This guide explains how the “Do Not Sell or Share” requirement works in practice and when websites commonly need it. Informational only — not legal advice.

Run a free compliance scan

1. What “sell or share” really means (plain English)

Under modern US privacy rules, “selling” data doesn’t always mean receiving money. Sharing personal information with third parties — such as advertising platforms, analytics providers, or marketing tools — can qualify as “sharing”.

2. Why normal websites trigger this requirement

Many sites unknowingly share data through:

Advertising networks
Analytics and tracking pixels
Embedded video, chat, or social tools
Marketing or attribution software

3. Why having the link reduces compliance risk

Providing a visible “Do Not Sell or Share” link shows that your site acknowledges user choice and data rights. Even when not strictly required, it’s widely used as a risk-reduction and trust signal.

4. Where the link should appear

Most compliant sites place the link:

In the site footer (site-wide)
Within the privacy policy
On a dedicated privacy or rights page

Websites with vs without “Do Not Sell or Share”

Websites with the link

Clear opt-out mechanism
Stronger user trust
Lower audit and ad-review risk
Aligned with CPRA expectations

Websites without the link

User rights unclear
Higher perceived data risk
More scrutiny from advertisers
Frequent compliance scan flags

In practice, adding the link is often easier than proving it isn’t required.

Check if your site triggers this

Related US website compliance & lawsuit risk guides

Frequently asked questions about “Do Not Sell or Share”

What does “Do Not Sell or Share” actually mean?

It allows users to opt out of their personal information being sold or shared with third parties, including ad and analytics providers.

Do I need this link if I don’t sell data?

Many sites add it anyway if they use ads, analytics, or tracking tools that involve data sharing.

Is this only for California-based businesses?

No. It can apply based on who you serve, not just where your business is located.

Is this legal advice?

No. This page is informational only.

Not sure if your site needs this?

Run a free US compliance scan and see which privacy signals are missing.

Run the scan