Do Not Sell or Share My Information
GoPickStack does not sell or share personal information. How affiliate click attribution works, how Global Privacy Control is honoured, and how to opt out.
1.The short answer
We do not sell your personal information. We have never sold, rented, traded, or bartered it, and we do not intend to. We also do not share it for cross-context behavioural advertising.
There is no advertising network on this site. There is no ad pixel, no retargeting tag, and no third-party advertising cookie. There is no advertising profile of you, and we have no data broker relationship of any kind.
We do not build a behavioural profile of you. The tools recommended to you are ranked from published review scores, price, and category fit. Your reading history has no effect on what you see.
So the opt-out mechanism that states like California expect to find on a site that advertises simply has nothing to switch off. We publish this page anyway, because a right you never have to use is still worth documenting, and because there is exactly one part of the site that could conceivably be characterised as a disclosure for monetary consideration. It is described next.
2.The one path that could count: affiliate click attribution
When you follow one of our outbound links to a vendor and later sign up or buy, the affiliate network that referred us may pay us a commission. That is the business model. It is free to you, and the price does not change.
For the network to attribute that sale, it needs to know the click happened. That works by setting its own cookie in your browser and reading it on the vendor's site. It is a disclosure of click metadata to Skimlinks, PartnerStack, Impact.com, or CJ Affiliate, and in a strict reading it could be characterised as a disclosure for valuable consideration. We would rather over-describe it than let you find out.
Two things about that. First, it is already gated. Affiliate attribution has its own consent category, and if you declined it, the affiliate script never loads at all. Nothing is set, nothing is sent, and referral tracking is simply off. Second, the money comes from the vendor, not from your data, and we do not receive your name, your email, or anything else about you.
Full detail on the networks and how to be paid, with no effect on your data, is in our affiliate disclosure.
3.How Global Privacy Control is honoured
A Global Privacy Control signal is how a browser or extension tells every site at once: do not sell or share my personal information. California recognises it as a valid opt-out mechanism, and several other US states now require recognising it. It is becoming the default answer to this entire page, which is why we treat it as authoritative rather than advisory.
Our handling is enforced in code, not left to good intentions. If your browser reports a Global Privacy Control signal, the site forces analytics and affiliate consent to off, regardless of what you clicked earlier in the same visit or what a previous visit stored. Turning it off again requires a Global Privacy Control signal to be removed first, so a stale "yes" cannot survive a later signal.
One honest limitation: a Global Privacy Control signal is sent by your browser, so we can only honour it if it reaches us. A blocking extension that drops the request entirely means we never see the visit at all, which achieves the same outcome by a different route.
4.How to opt out yourself
The "Manage cookies" link in the site footer opens a panel where you can switch off any optional category. Withdrawing consent is exactly as easy as giving it, which is the part most sites get wrong and which the EU and UK regulators treat as a requirement rather than a nicety.
- Analytics. Turn it off and Plausible stops loading. It was cookieless and stored no personal data anyway, so switching it off costs you nothing measurable.
- Affiliate attribution. Turn it off and the affiliate scripts never load, no partner cookies are set, and outbound links stop being attributed. Purchases still work normally, you simply do not generate a referral for us.
- AI Copilot. Turn it off and the Copilot answers only from our own published data, with no question text sent to a third-party model provider.
- Strictly necessary. Stays on. Your shortlist, your theme, and the memory of your own choice need to work or the site is broken.
Your choice is stored in your browser for a year so we do not ask on every page. Clearing your browser data for this site also clears the choice, so you will see the panel again.
5.Other US state laws
As of the effective date of our Privacy Policy, 20 US states have comprehensive consumer privacy laws in effect:
California (CCPA/CPRA), Colorado (CPA), Connecticut (CTDPA), Delaware (DPDPA), Florida (FDPPA), Indiana (INCDPA), Iowa (ICDPA), Kentucky (KCDPA), Maryland (MODPA), Minnesota (MCDPA), Montana (MCDPA), Nebraska (NDPA), New Hampshire (NHPA), New Jersey (NJDPA), Oregon (OCPA), Rhode Island (RIDTPPA), Tennessee (TIPA), Texas (TDPSA), Utah (UCPA), Virginia (VCDPA).
The laws are not identical. Some define sale and sharing differently, some require an opt-in rather than an opt-out, some require recognising a universal opt-out signal, some set lower thresholds before they apply to a business at all, and some require a formal appeal route when a request is denied. We do not try to satisfy each one differently.
We extend the same set of rights to everyone, in every jurisdiction, regardless of where you live. You do not need to prove residency, and you do not need to quote a statute. Ask, and we action it.
6.Making a formal request
If you want this in writing on the record, email Muhammad Shadab Shams at hi@gopickstack.com from the address you have used with us and say that you are exercising your right to opt out of the sale or sharing of personal information, and any other right you want to exercise.
We confirm receipt and complete the request within 45 calendar days, which is the outer limit the US state laws set. In practice it is one message, because there is nothing switched on to switch off, and we will say so.
We never charge for a request, and we never treat you worse for making one. If a request is denied we tell you why in writing, and most state laws give you the right to appeal that, which we support.
7.Questions
If anything on this page is unclear, or you think we are doing something we should not be, ask through the contact page. A question about how we handle data is always welcome, and it is a better outcome for both of us than a regulator or a data broker finding it first.
How to reach us
Muhammad Shadab Shams, trading as GoPickStack, Sole proprietor, not incorporated. P/O Lang Shumali, Jhang, 35300, Punjab, Pakistan.
Email hi@gopickstack.com. We read every message and we answer privacy requests within the deadline stated in our [Privacy Policy](/privacy).
Related documents
- Privacy PolicyWhat we collect, why, the lawful basis, who receives it, and where it goes.
- Cookie PolicyEvery cookie and local storage we use, its purpose, and its lifetime.
- Delete My DataRequest erasure of your email address and submission records.
- Terms of ServiceThe rules governing your use of GoPickStack.
- AI Features PolicyHow the Copilot works, what it can get wrong, and what you agree to when you use it.
Build my stack