Privacy Preference Center

The Privacy Preference Center empowers users to control their preferences, including consent and marketing choices. It also provides an option for unauthenticated/anonymous users to opt-out of "Do Not Sell My Personal Information" (DNSMPI) to comply with CPRA.

Before you start, make sure you have the following prerequisites in place:

  • Enable Preference Store.
  • Your consent manager's allowed domains list must include your Privacy Center domain. This is already true if your Privacy Center is on a subdomain of your primary domain (e.g. privacy.your-site.example)

If you're self-hosting Sombra, ensure that your instances are updated to version v7.197.0 or higher. Additionally, configure the environment variable ALLOW_UNAUTHENTICATED_PREFERENCE_UPDATES to true. This setting will enable anonymous users to opt-out of sale of personal infromation.

If you are using Transcend-hosted Sombra, you can enable this configuration on Preference Store settings.

Preference Store > Settings > Preference Store Authentication

To enable the Privacy Preference center, update the Privacy Center configuration to include Show Manage your privacy tab, under Privacy Center > General Settings on the Admin Dashboard. Once you've updated the configuration, publish the changes to make them live.

Privacy Center > General Settings > Manage your privacy

Once these steps are completed, users will see the Manage your privacy tab on the Privacy Center. This tab will allow users to opt-out of sale of personal information. Once a user opts out, their preference will be stored in the Preference Store and a DSR will be triggered.

Privacy Center > Manage your privacy

In addition to DNSMPI, authenticated users can manage their consent and marketing choices on the Privacy Center. To enable this feature, update the Privacy Center configuration to include Show Privacy Preferences, under Privacy Center > General Settings on the Admin Dashboard.

Privacy Center > General Settings > Show Privacy Preferences

If a user is not logged-in, the consent and marketing preferences will not be stored in the Preference Store and thus will not trigger a DSR. However, the user's preferences will be stored on the browser's local storage or through Transcend XDI sync.

Privacy Center > Manage your privacy > Privacy Preferences