Provision record
McDonald's · McDonald's Privacy Policy · View original document ↗

McDonald's processes Global Privacy Control opt-out signals

High severity High confidence Explicitdocumentlanguage Common · 295 of 352 platforms

Key Facts

How does McDonald's process opt-out requests submitted via an opt-out preference signal?
McDonald's processes opt-out requests submitted via an opt-out preference signal as required by applicable law, and treats a detected Global Privacy Control signal as a request to opt out of sale and sharing.
What does McDonald's treat a detected Global Privacy Control signal as?
McDonald's processes opt-out requests submitted via an opt-out preference signal as required by applicable law, and treats a detected Global Privacy Control signal as a request to opt out of sale and sharing.
Get alerted the next time McDonald's changes these terms. Follow McDonald's →
Share 𝕏 Share in Share 🔒 PDF
Monitor governance changes for McDonald's Monitor emails you the same day this changes. The archive stays free.
Follow McDonald's →

Get the weekly research letter

Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean. No account.

This analysis describes what McDonald's's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology

ConductAtlas Analysis

Why it matters (compliance & governance perspective)

Users can exercise data sale and sharing opt-out rights automatically through browser-level signals without taking manual steps on McDonald's platform.

Interpretive note: The canonical claim states two closely related propositions. The primary claim is GPC signal treatment; the general opt-out signal processing obligation is recorded in omitted_material but is closely linked and both are stated in the claim for accuracy.

Consumer impact (what this means for users)

If your browser sends a Global Privacy Control signal, McDonald's will treat it as a request to opt out of the sale and sharing of your personal information.

How other platforms handle this

Skillshare Medium

You may make a verifiable consumer request related to your personal information twice per 12-month period.

Discord Medium

You can choose to what extent we will use your personal information to personalize your Discord experience.

Anthropic Medium

where the EU GDPR or UK GDPR applies, we will respond within one calendar month of receiving a verifiable request, and where your request is complex...we may extend that period by up to a further two months.

See all platforms with this clause type →

Monitoring

McDonald's has changed this document before.

Receive same-day alerts, structured change summaries, and monitoring for up to 20 platforms.

Follow McDonald's → Or create a free account →
▸ View Original Clause Language DOCUMENT RECORD
"
We process opt-out requests submitted using an opt-out preference signal as required by applicable law. For example, when we detect the Global Privacy Control ("GPC") signal from a browser, we treat the signal as a request to opt out of sale and sharing...

Excerpt from McDonald's's Privacy Policy

Applicable regulations

CCPA/CPRA
California, USA
Connecticut Data Privacy Act Amendments
US-CT
CAN-SPAM
United States Federal
FTC Act Section 5
United States Federal
GDPR
European Union
Indiana Consumer Data Protection Act
US-IN
Kentucky Consumer Data Protection Act
US-KY
Universal Opt-Out Mechanism Expansion 2026
US

Provision details

Document information
Document
McDonald's Privacy Policy
Entity
McDonald's
Document last updated
May 5, 2026
Tracking information
First tracked
July 9, 2026
Last verified
July 9, 2026
Record ID
CA-P-053384
Document ID
CA-D-00627
Evidence Provenance
Source URL
Wayback Machine
Content hash (SHA-256)
482caf5dfacdab6e9adc5e0136860aef5e3fc638952402bc29047d99f8bea94b
Analysis generated
July 9, 2026 09:29 UTC
Methodology
Evidence
✓ Snapshot stored   ✓ Hash verified
Citation Record
Entity: McDonald's
Document: McDonald's Privacy Policy
Record ID: CA-P-053384
Captured: 2026-07-09 09:29:18 UTC
SHA-256: 482caf5dfacdab6e…
URL: https://conductatlas.com/platform/mcdonalds/mcdonalds-privacy-policy/provision/CA-P-053384/mcdonalds-processes-global-privacy-control-opt-out-signals/
Accessed: July 25, 2026
Permanent archival reference. Stable identifier suitable for legal filings, compliance documentation, and research citation.
Classification
Severity
High
Categories

Other risks in this policy

Related Analysis

Governance intelligence across arbitration, AI governance, data rights, indemnification, and retention

Provision-level monitoring, governance timelines, and regulatory mapping built from archived source documents and historical version tracking.

Frequently Asked Questions

What does McDonald's's McDonald's processes Global Privacy Control opt-out signals clause do?

Users can exercise data sale and sharing opt-out rights automatically through browser-level signals without taking manual steps on McDonald's platform.

How does this clause affect you?

If your browser sends a Global Privacy Control signal, McDonald's will treat it as a request to opt out of the sale and sharing of your personal information.

How many platforms have this type of clause?

ConductAtlas has identified this type of provision across 295 platforms. See the full comparison.

Is ConductAtlas affiliated with McDonald's?

No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by McDonald's.