Last updated: September 2, 2025

This page explains how you can exercise your rights under the California Privacy Rights Act (CPRA) to opt out of "sale" or "sharing" of personal information for cross-context behavioral advertising (e.g., interest-based ads). For a full description of our data practices and your privacy rights, see our Privacy Policy.

What "sell" or "share" may mean here
Under the CPRA, certain uses of analytics and advertising technologies (e.g., Google Analytics 4, Meta Pixel) may be considered a "sale" or "sharing" of personal information.

Categories potentially involved: cookie/device identifiers, IP (or truncated/hashed forms), internet activity (page views, clicks), approximate location, and inferences for ad relevance.

Recipients: advertising/measurement and analytics partners.

We do not knowingly sell or share the personal information of consumers under 16 years of age.

How to opt out (choose one or more)
1. Use this page (recommended for changes anytime)
Use the controls on this page Data Sharing Opt Out to opt out of sale/sharing and to adjust advertising/analytics cookies and similar technologies.
Note: Cookie-based choices are browser/device specific. If you clear cookies or switch browsers/devices, please revisit this page to reapply your preferences.

2. Global Privacy Control (GPC)
We honor GPC signals from supported browsers/extensions. If we detect GPC, we treat it as a CPRA opt-out of sale/sharing and will avoid setting/using non-essential advertising cookies to the extent required.

3. Initial cookie banner (first visit)
On your first visit you can select Reject Non-Essential in our cookie banner. You can later return to this page to change your choice.

4. Email request (covers off-site ad audiences, too)
Email support@cosmelio.com with subject "CPRA Opt-Out" and include:

- Your name and email address (used with us)
- Any order number(s) (if available)
- A note stating: "I am requesting to opt out of 'sale' or 'sharing' of my personal information."

We'll apply your opt-out both to advertising/analytics partners and to any ad audience lists we maintain that include your contact data. We may take reasonable steps to verify your identity before completing the request.

Scope & timing
- Browser/device scope: Cookie choices and GPC are browser/device specific.
- Account/email scope: Email opt-outs apply to our ad audiences and similar uses associated with your email/account.
- Processing time: We aim to honor opt-outs promptly and no later than 15 business days, as required by CPRA.
- Non-discrimination: We will not discriminate against you for exercising your rights.

Authorized agents
You may use an authorized agent to submit an opt-out. We may require reasonable documentation showing the agent's authority (e.g., signed permission, proof of identity).

Sensitive personal information
We do not use or disclose sensitive personal information for purposes that require a CPRA "Limit the Use" link. If this changes, we will update this page and our Privacy Policy.