California Privacy Notice

This California Privacy Notice supplements our general Privacy Policy and applies to California residents who use LinkStacked or whose personal information we collect.

This notice is provided in accordance with the California Consumer Privacy Act of 2018 (CCPA) as amended by the California Privacy Rights Act of 2020 (CPRA), effective January 1, 2023.

In the preceding 12 months, we have collected the following categories of personal information from or about California residents:

Under the CPRA's expanded definition of "sharing" (cross-context behavioural advertising), we may "share" certain personal information with third-party advertising platforms when:

• You visit a creator profile that has third-party advertising pixels enabled, AND
• You have consented to marketing cookies via our cookie consent banner

In these cases, pixel data (typically a unique visitor ID and event data) may be transmitted to Meta, TikTok, Snapchat, Pinterest, or X — as configured by the creator. You can opt out at any time by:

• Clicking "Cookie preferences" in our footer and disabling marketing cookies
• Using a browser extension that blocks third-party tracking (uBlock Origin, Privacy Badger)
• Enabling the Global Privacy Control (GPC) signal in your browser — we honour GPC as an opt-out of sharing

California residents have the following rights under the CCPA/CPRA:

• Right to know — Know what personal information we have collected about you, including categories of information, sources, purposes, third parties shared with, and specific pieces of information.
• Right to delete — Request deletion of your personal information, subject to certain exceptions (legal obligations, security, etc.).
• Right to correct — Request correction of inaccurate personal information we hold about you.
• Right to opt out of selling/sharing — Opt out of the "sale" or "sharing" (cross-context behavioural advertising) of your personal information.
• Right to limit use of sensitive personal information — Request that we limit our use of your sensitive personal information (payment data, government ID) to what is necessary to provide the service.
• Right to non-discrimination — We will not discriminate against you for exercising your privacy rights (see Section 6).

You may exercise your California privacy rights through the following channels:

• Dashboard — Settings → Data → Export (right to know), Settings → Data → Danger zone (right to delete), Settings → Profile or Account (right to correct).
• Email — Send your request to privacy@linkstacked.com with subject line "California Privacy Request — [right type]".
• Opt-out of sharing — Cookie preferences in our footer, or by honoring the Global Privacy Control (GPC) browser signal.

We will acknowledge your request within 10 business days and respond within 45 days. We may extend the response period by an additional 45 days (90 days total) for complex requests, with prior notice.

We may ask you to verify your identity to protect your data from unauthorised disclosure. We will match identifying information you provide against our records. We will not require verification for opt-out requests.

We will not discriminate against you for exercising any of your California privacy rights. Specifically, we will not:

• Deny you goods or services
• Charge you different prices or rates
• Provide you a different level or quality of service
• Retaliate against you in any way

For California privacy requests: