Consumer rights center.
Pseudonymization is not anonymity. The planned system is designed to honor exclusion at the boundary and inspection through documented responses. These are design targets; forms below are non-submitting placeholders.
Opt-out, access, deletion, correction.
Opt-out
A deployed service would stop including the requesting token in cohort construction and propagate suppression within a documented window.
Access
A deployed service would return a description of cohort-bucket participation at the cohort level, not the user level.
Deletion
A deployed service would delete the requesting token and associated non-cohort records. Cohort aggregates may persist until they decay.
Correction
A deployed service would support correction of identity-domain records. Token correctness would remain a separate operation bound by rotation policy.
Global Privacy Control target behavior.
When a participating surface forwards a Global Privacy Control (GPC) signal, BingBong targets suppression at the boundary rather than at the buyer. GPC is treated as a privilege boundary, not a soft preference. This is a design target until the partner surface roster is operational.
| Signal | Target behavior | Status |
|---|---|---|
| Sec-GPC: 1 | Suppress token issuance; suppress event ingestion. | DESIGN TARGET |
| DNT: 1 (legacy) | Documented behavior; not relied upon as the primary signal. | DOCUMENTED |
| Opt-out via this rights form | Suppression at ingestion within documented window. | DESIGN TARGET |
Forms are non-submitting placeholders.
A real submission path is not deployed in pre-launch. The form below demonstrates the planned shape and does not transmit data.