Do Not Sell or Share My Personal Information

California expects notice at or before collection, not just buried in the privacy policy. A short notice like this can sit near signup, checkout, account creation, and contact forms:

Notice at Collection for California Residents

We collect the categories of personal information described in our Privacy Policy for the business and commercial purposes described there. We may also collect certain sensitive personal information where applicable. We retain each category of personal information for the period described in our Privacy Policy or according to the criteria described there. If applicable, California residents may opt out of the sale or sharing of personal information by clicking “Your Privacy Choices” in the footer. Please review our Privacy Policy here: https://www.weloveplugs.com/pages/privacy-policy

What must be live on the site, not just written in the policy

California requires practical request methods and, where applicable, conspicuous links for opt-out and sensitive-information limits. The CPPA FAQ says businesses subject to opt-out or limit rights must include information in the privacy policy on how to exercise those rights, and the California DOJ says businesses that sell or share data online must honor valid Global Privacy Control signals. The CPPA’s notice guidance also requires notice at or before collection, including retention and whether information is sold/shared.