files/en-us/web/http/reference/headers/sec-gpc/index.md
{{SeeCompatTable}}
The HTTP Sec-GPC {{Glossary("request header")}} is part of the Global Privacy Control (GPC) mechanism to indicate whether the user consents to a website or service selling or sharing their personal information with third parties.
The specification does not define how the user can withdraw or grant consent for website.
<table class="properties"> <tbody> <tr> <th scope="row">Header type</th> <td>{{Glossary("Request header")}}</td> </tr> <tr> <th scope="row">{{Glossary("Forbidden request header")}}</th> <td>Yes (<code>Sec-</code> prefix)</td> </tr> </tbody> </table>Sec-GPC: <preference>
<preference>
1 means the user has indicated that they prefer their information not be shared with, or sold to, third parties.
Otherwise, the header is not sent, which indicates that either the user has not made a decision or the user is okay with their information being shared with or sold to third parties.The user's GPC preference can also be read from JavaScript using the {{domxref("Navigator.globalPrivacyControl")}} or {{domxref("WorkerNavigator.globalPrivacyControl")}} property:
navigator.globalPrivacyControl; // "false" or "true"
{{Specifications}}
{{Compat}}