DONE FOR YOU — AND KEPT THAT WAY

Privacy & Cookie Compliance for Your Website

Your privacy policy isn't protecting you.
Most sites have a cookie banner. Far fewer have one that actually honors the visitor's opt-out — and that gap is what's getting small businesses sued.
Book a 15-minuteCompliance Check
Image
A blue-suited man holding a drink sits at an office desk, while a blue, furry character enjoys cookies nearby.

What's Up?

I recently went through every site in our hosting portfolio (an afternoon I'll never get back.) The majority of those websites are not compliant with current privacy law.

The minority already have a cookie banner — but it doesn't actually honor the visitor's opt-out (the Global Privacy Control signal), which is the part that counts. Three things make this urgent today:

  • The lawsuits are already here — firms are targeting small and mid-size businesses over trackers running without consent.
  • The regulators mean it — California fined Sephora $1.2M for exactly this.
  • The deadline is set — California's Opt Me Out Act (AB 566) takes effect January 1, 2027.
A man with curly, gray hair and a beard stands in a cozy room filled with books and a globe.

Chris Foley

Founder - PXLPOD Web Strategy
The actual Problem

The problem isn't your policy.

It's what your banner does (or doesn't do) when someone opts out.

Almost everyone gets this part wrong. Especially if it's a DIY job. Having a privacy policy and having a consent banner are two different things — one is disclosure, the other is consent — and plenty of sites have both. That's not where the exposure is.

The real gap: modern browsers can broadcast an opt-out — Global Privacy Control (GPC), and the older Do Not Track — that says "don't sell or share my data." A compliant banner has to listen for that signal and actually block tracking when it sees it. Most never turn that on. They pop up, collect a click, and keep firing every tracker regardless.

Worse: plenty of sites publish a policy claiming they honor those signals while the banner ignores them. Now you're not just non-compliant — you've put a promise in writing your own site breaks every day. That's the gap that gets noticed.

And no — the fix isn't "turn cookies off." Kill everything and your booking widget, store login, and even your fonts break. The work is honoring the opt-out while keeping the essential cookies running — fiddly by hand, and fiddlier still if the site runs Google Tag Manager.

$0M
the penalty Sephora paid California's first-ever CCPA enforcement action, 2022.
Why Now

You don't have to be big. You just have to be scannable.

Almost everyone gets this part wrong. Especially if it's a DIY job.

Having a privacy policy and having a consent banner are two different things — one is disclosure, the other is consent — and plenty of sites have both. That's not where the exposure is.

The real gap: modern browsers can broadcast an opt-out — Global Privacy Control (GPC), and the older Do Not Track — that says "don't sell or share my data." A compliant banner has to listen for that signal and actually block tracking when it sees it. Most never turn that on. They pop up, collect a click, and keep firing every tracker regardless.

Worse: plenty of sites publish a policy claiming they honor those signals while the banner ignores them. Now you're not just non-compliant — you've put a promise in writing your own site breaks every day. That's the gap that gets noticed.

And no — the fix isn't "turn cookies off." Kill everything and your booking widget, store login, and even your fonts break. The work is honoring the opt-out while keeping the essential cookies running — fiddly by hand, and fiddlier still if the site runs Google Tag Manager.

Did you know

The things almost everyone gets wrong.

A smiling man with dark hair and a casual blue shirt, set against a gradient blue background.
myth
"I have a Privacy Policy page, so I’m compliant."
the reality

A policy is disclosure; consent is a separate thing. The policy says what you collect — consent is about honoring what the visitor chooses. Having one doesn’t give you the other, and the policy alone protects no one.

myth
"My cookie banner is up, so I’m covered."
the reality

A banner only counts if it actually honors the visitor’s opt-out preference signals — Global Privacy Control (GPC), and the older Do Not Track — and blocks tracking when it sees them. Plenty of banners never turn that on, so they keep collecting and sharing data from people who already opted out. That’s the exact failure that cost Sephora $1.2M.

myth
"My policy says we respect Do Not Track and GPC, so we’re fine."
the reality

Saying it in your policy is a claim, not a control. If your banner isn’t configured to actually block when it receives that signal, you’ve published a compliance promise your site breaks every day — which is worse than saying nothing at all.

myth
"I only sell in the US, so this EU cookie stuff doesn’t apply."
the reality

US state laws — California’s CCPA leading — already require cookie disclosure, opt-out, and honoring browser opt-out signals. You don’t need EU customers to be exposed; you need US visitors and unconsented trackers.

myth
"My business is too small to get sued over something as stupid as cookies."
the reality

The current wave of privacy lawsuits targets small and mid-size businesses, because the firms behind them run automated scans that flag unconsented trackers regardless of company size. Small makes you a faster target, not a safer one.

myth
"A cookie banner will break my site or tank conversions."
the reality

Blocking every cookie breaks a site; a properly configured consent setup doesn’t. The work is keeping essential cookies (login, booking, fonts, CDN) live while gating tracking and ad cookies. It’s configuration, not an all-or-nothing switch.

myth
"Under CCPA I can leave all cookies on and ignore opt-outs."
the reality

California requires you to honor opt-out preference signals like Global Privacy Control. “Implied consent” is not a free pass — ignoring a browser opt-out is exactly what cost Sephora $1.2M.

myth
"This is a future problem I can deal with later."
the reality

The exposure is here now through today’s lawsuits, and the next deadline is already on the calendar: California’s AB 566 puts a one-click opt-out in every browser on January 1, 2027.

myth
"Compliance is a one-time setup."
the reality

The laws keep changing (AB 566 is proof, and more states keep adding requirements). A site set up once drifts out of compliance as laws shift and new scripts get added. It needs ongoing management, not a one-time patch.

myth
"If I just turn all cookies off, at least I’m safe."
the reality

Turning everything off breaks core functionality — analytics, bookings, logins, even your fonts — and still isn’t what the law asks for. The requirement is informed choice and honored opt-outs, not a dead site.

    Which are you?

    CCPA or GDPR.

    A shield emblem featuring a lock symbol, a check mark, and the acronym "CCPA" signifying data privacy compliance.

    CCPA

    Of the 20 (currently) US states with comprehensive consumer privacy laws that regulate how websites handle cookies, California is the strictest. Set yourself up to meet CA's requirements you cover the rest. More forgiving: cookies can generally start on, show a consent banner, and honor opt-outs and browser signals.
    A blue background with a circle of yellow stars, a central lock icon, and the text 'GDPR' below, representing data protection.

    GDPR

    Stricter: cookies start off, and you earn a yes before most fire — which affects analytics and conversion data. Our workaround is a server-aware analytics setup so you still see the journey when a visitor declines. And our banner systems detect where the visitor is located and delivers the appropriate banner.

    This is really hard to DIY.

    The right setup handles both — but only when it's configured correctly for your specific site. Which one your site needs is exactly what we sort out on the call.
    The Fix

    Start with a 15-minute call.

    There's no one-size cookie fix — the right setup depends on your site, your traffic, and how it's built. So we don't hand you a buy button and a guess. We start with a short call, figure out exactly what your site needs, and put it in place for you.

    You talk to us. We handle the rest.

    1. Book a 15-minute call. We look at your actual site together.
    2. We tell you exactly what it needs — and which solution fits (some sites are simple; some need more).
    3. We set it up and keep it working — most clients fold this into SecurePod Care so it just stays handled as the laws keep moving.
    Book a 15-minuteCompliance Check

    Why a call and not a buy button?

    A buy button can't tell whether your site needs a simple banner or a full consent setup inside a complex tag manager — and paying for the wrong fix is worse than waiting. Fifteen minutes gets you the right answer the first time.

    Already on SecurePod Care?

    You're covered — we've already rolled this across your sites at no extra charge. Nothing to book, nothing to do. (That's the point of SecurePod: the fire drills are our problem.)
    FAQ

    Straight Answers

    Image

    Not fun. But not complicated once someone owns it.

    Questions? Book a quick call. On a SecurePod plan? Don't even bother — we've got it.
    Book a 15-minuteCompliance Check
    Ongoing SupportExplore SecurePod Care

    “PXLPOD Media has been an outstanding partner in managing our web services and hosting. Their expertise, responsiveness, and attention to detail… They consistently go above and beyond. Highly recommended!”

    A smiling man in a dark suit with a light blue shirt and tie, set against a gray background.

    Scott Zafiropoulo

    Senior Director of Marketing

    Amprius Technologies

    “We’ve had a long partnership with PXLPOD. Chris’ approach blends operational efficiencies, creative expertise, data-oriented decision-making and mentorship. I highly recommend PXLPOD for any business owner!”

    A woman with long hair and striking blue eyes wears a black blazer and a silver necklace, set against a neutral background.

    HELENA LEATHERS

    Senior Marketing Manager

    Mission Wealth

    “PXLPOD hosting is 2nd to none. The speed in which our site now runs is so much faster than ever. We cannot give enough praise on how much better our website looks, runs and is always maintained. Is 10 Stars even enough? probably not!”

    A nostalgic collection featuring G.I. Joe action figures, vintage toys, comic books, and themed merchandise arranged creatively.

    Spideyguy

    Very happy hosting customer

    Peewee Comics

    “Christopher wants the best for your brand. No matter the project or idea, he’s right there with you, bringing industry-leading ideas to the table – all to help make you and your brand shine!”

    A smiling man with a beard sits casually on stairs, wearing a denim shirt and jeans, with a relaxed and friendly demeanor.

    ERIC HODGDON

    TEDx Speaker, Author, Trainer, Chief of Staff

    Rooftop Leadership

    “We hired PXLPod to design, build, and host our new website. The entire experience was smooth and the traffic has exceeded our expectations. We are forever grateful!”

    A smiling man with a bald head and blue eyes, wearing a black suit, set against a dark background.

    CHRIS JASKEIWICZ

    President,

    Advantage Video

    “Chris’ ideas, passion, and candor are refreshing. He will communicate what best serves your organization, and importantly, your customers. Intelligence, vast experience and dedication to performance. Great results!”

    A man with facial hair smiles, wearing a blue hoodie, in a bright space filled with people engaged in activities.

    MICHAEL GUARNIERI

    Making Brands Famous on Podcasts & Radio

    NuMedia Mix

    “A week doesn’t go by where I don’t unconditionally recommend Chris for a project. He is extremely creative, a consummate professional and a great listener. PXLPOD consistently delivers top-tier results.”

    A man with a beard, wearing a brown beanie and a dark hoodie, standing against a light background, looking thoughtfully to the side.

    Tyler Suchman

    Owner

    Tribal Core & The Storage Agency

    “When it comes to conversion driven websites, business guidance, and web strategy, PXLPOD has got your back. Expertise personified!” 

    A smiling man in a black sweater over a blue checkered shirt stands outdoors with greenery in the background.

    Kyle Svenningsen

    President

    inStyle Technologies

    “Mastery and superb customer service are two ways I describe Chris’ approach to web design and creation. The process was straightforward, the milestones were meticulously kept, and the end product exceeded my expectations.”

    A bearded man wearing glasses and a blue shirt poses against a light backdrop, conveying a serious demeanor.

    Dylan Bain

    Founder

    Intuitive Finance

    “Really happy I got away from my former web-hosting/SEO people. I felt like I was babysitting and asking college kids to constantly fix things they screwed up. My website is in very good hands now.”

    A smiling man with a beard, wearing a checkered shirt, stands against a wooden backdrop.

    Colt Gordon

    Founder

    Bydand Therapy

    “Christopher has deep technical knowledge in all of the areas we really needed help; effective web design and development, strategy, and especially, how to manage me, the CEO. PXLPOD has been instrumental for our many projects since 2010!”

    A man with glasses and gray hair, wearing a blue checkered shirt, stands confidently with arms crossed in a modern workspace.

    MARK SYLVESTER

    Strategist - Storyteller

    TEDx Santa Barbara

    “Chris has taken the time to learn my objectives and the outcomes I want. His intimate understanding of my business goals makes him an essential part of my team. His suggestions spark conversations where the best idea wins, I love that.”

    A smiling woman with long brown hair poses confidently in a stylish black outfit against a warm, rustic background.

    KYMBERLEE WEIL

    Stupendous Badass

    Storytelling School

    “Chris has helped me on numerous projects. He’s a rare gem in the web space and I’m grateful for his first-class service. I’ve benefited immensely from his level of care, understanding, expertise, and attention to detail. Highest recommendation!”

    A smiling bald man with a grey background, showcasing a cheerful expression and casual attire.

    ADAM FRIEDMAN

    Owner

    Advanced Athletics

    “Not only has PXLPOD greatly improved our website to make it faster, more engaging, and more efficient, but Chris’ expert recommendations have resulted in significantly improved email engagement. Your search ends here.”

    A woman in a denim jacket and black hat poses confidently outdoors, illuminated by soft sunlight with a blurred background of buildings.

    Audra Tavelli

    Founder

    Fizz Wine Marketing

    “Chris’ technical capabilities are deep and I can fully rely on him and his team to do great things. His emotional intelligence, ability to really “get” me and the folks I want to reach have made working with him over the last decade a great experience for me.”

    A smiling woman with shoulder-length dark hair, wearing a black top and earrings, poses against a neutral background.

    MARSHA LUCAS, PhD

    Psychologist • Neuropsychologist

    Psychotherapy, Washington D.C.

    “A huge shoutout to Christopher and the entire PXLPOD team for their incredible work on Finvisor’s website redesign! It’s been an absolute pleasure collaborating with such a talented group. We’re thrilled.”

    A smiling man with short dark hair and a floral shirt stands against a natural green background.

    Noah Hopton

    CEO

    Finvisor

    “I’ve worked closely with Chris & PXLPOD for over 7 years now, since 2018. His meticulous and precise attention to detail has produced several superlative websites that amplify our mission and vision in a phenomenal way.”

    A woman with short hair and a necklace smiles warmly, with a colorful background featuring an abstract scene.

    YONETTE FELICITY THOMAS, PhD

    Founder and CEO

    Urban Health 360

    “Christopher’s work is stellar, he is responsive, reliable and best of all – he does what he says he’ll do. He rises to challenges and is not afraid of the unknown. Trustworthy, consistent and works well with people, and I highly recommend him.”

    A man with a serious expression, wearing a dark shirt, poses against a plain background in black and white tones.

    DENZYL FEIGELSON

    Advisor to Apple Music & CEO,

    Platoon

    “I’ve been hosting with PXLPod since 2011. They’ve been there for me without fail. My energy can go where it’s needed without worry that my online presence needs my attention.”

    A man with tousled hair wears sunglasses, dressed in a light-colored collared shirt, set against a clear sky.

    RAY JOHNSTON

    Teacher, Author

    Safari Retreat Organizer

    PXLPOD
    builds

    websites that grow your business.