California residents can ask Mercury what data it holds about them, request that data be deleted, and opt out of having their data sold or shared with third parties for advertising, without facing retaliation for doing so.
This analysis describes what Mercury's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
These are legally enforceable rights under California law, meaning Mercury is required to honor them within defined response timelines, giving California-based business owners meaningful control over their data.
Interpretive note: The scope of CCPA rights applicable to Mercury may be partially limited by the GLBA exemption for data collected in connection with financial products, and the precise boundary of that exemption requires case-by-case analysis.
The updated privacy policy now discloses that cookies from Facebook Ads, Bing Ads, Braze, Google Ads, and LinkedIn Ads serve an additional purpose: 'SaleOfInfo'. This means data collected through these cookies may be sold or shared with third-party commercial partners, beyond their existing use for advertising and analytics. Under the revised policy, Mercury treats data from these cookies as subject to potential sale or commercial sharing. You can review Mercury's full privacy policy to understand your data rights and any available opt-out mechanisms.
View change record →Removal of explicit CCPA rights summary may indicate consolidation into separate compliance notices, potentially reducing consumer awareness of statutory rights in the main privacy policy.
View full change record →California-resident business owners and individuals associated with Mercury accounts can exercise access, deletion, and opt-out rights under CCPA, including opting out of data sharing for cross-context behavioral advertising, which provides a concrete mechanism to limit how Mercury uses and shares personal data.
How other platforms handle this
When you use them, we'll validate your request by verifying your identity (for example, by confirming that you're signed in to your Google Account).
Not be Discriminated Against by us for exercising your privacy rights.
You may contact our privacy team with any requests of disclosure, correction, or deletion of your personal information. You may also request suspension of use or suspension of sharing of your personal information with certain third parties.
"If you are a California resident, you have certain rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information we collect, use, disclose, and sell, the right to request deletion of your personal information, the right to opt out of the sale or sharing of your personal information, and the right not to be discriminated against for exercising your privacy rights.Excerpt from Mercury's Privacy Policy
REGULATORY LANDSCAPE: The California Consumer Privacy Act as amended by the California Privacy Rights Act grants California residents enumerated rights including access, deletion, correction, portability, and opt-out of sale or sharing of personal information.
Enforcement risk, jurisdiction flags, contract triggers, and due diligence action items.
Search "[your state] attorney general consumer complaint" to find your state's direct complaint form
Ad personalization controls removed. Contact scanning added. Advertiser data partnerships quietly dropped. A timeline of every change.
Get the research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
These are legally enforceable rights under California law, meaning Mercury is required to honor them within defined response timelines, giving California-based business owners meaningful control over their data.
California-resident business owners and individuals associated with Mercury accounts can exercise access, deletion, and opt-out rights under CCPA, including opting out of data sharing for cross-context behavioral advertising, which provides a concrete mechanism to limit how Mercury uses and shares personal data.
ConductAtlas has identified this type of provision across 290 platforms. See the full comparison.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Mercury.