Everyday Privacy
How to Opt Out of Targeted Advertising (2026)
The short version
There is no single off switch, but there are four that matter. Turn on Global Privacy Control in a browser that supports it, because in some states companies are legally required to obey it. Use the ad industry's own opt-out tools, knowing they are per-browser and easy to lose. Delete or block your phone's advertising ID. Then cut the supply by removing yourself from the data brokers that feed the targeting graph in the first place.
What "targeted advertising" actually means
Targeted advertising, sometimes called interest-based advertising, means ads chosen for you based on a profile built from your behavior rather than from the page you are reading. That profile is assembled from browsing history, app activity, purchases, and location, then tied to an identifier such as a cookie, a mobile advertising ID, or a hashed version of your email address.
The uncomfortable part is that the profile usually is not held by the site showing you the ad. It lives with ad networks, data platforms, and brokers you have never heard of, which is why the same shoe follows you from a news site to a podcast app.
Why data brokers are the reason ads follow you
Ad platforms cannot connect your laptop to your phone to your loyalty card on their own. Data brokers do that joining work, selling identity graphs and location feeds that let a bid for an ad slot be matched to a real person. Opting out of ads without touching brokers leaves the raw material in place.
Regulators have documented the pipeline. In January 2024 the FTC ordered data broker X-Mode Social and its successor Outlogic to stop selling sensitive location data, describing how the company gathered precise location from a software development kit embedded in third-party apps and by buying data from other brokers. The same month, the FTC moved to bar InMarket Media from selling or licensing precise location data, alleging it did not fully inform consumers or get consent before using that data for advertising and marketing.
In May 2026 the FTC announced a settlement that would bar Kochava and a subsidiary from selling, sharing, or disclosing sensitive location data without affirmative express consent, over allegations they sold location data from hundreds of millions of mobile devices. None of these are fringe operators; they are ordinary plumbing of the ad market.
Step one: turn on Global Privacy Control
Global Privacy Control (GPC) is a setting your browser sends automatically to every site you visit, telling it not to sell or share your personal information. It is the only opt-out on this page that carries legal force, because several state privacy laws treat it as a valid opt-out request rather than a polite suggestion.
Colorado is the clearest example. The Colorado Attorney General maintains a public list of recognized universal opt-out mechanisms, GPC is currently the only one on it, and since July 1, 2024 businesses covered by the Colorado Privacy Act must let people opt out of the sale of their data and of targeted advertising through GPC.
Which browsers actually send the signal
This is where most people get stuck: the browser almost everyone uses does not support GPC out of the box. The signal is built into privacy-focused browsers and available as an extension elsewhere, so the practical answer is either switch browsers or add one extension.
| Browser or tool | GPC support | What to do |
|---|---|---|
| Brave | Built in | Enabled by default in privacy settings |
| Firefox | Built in | Turn on in privacy and security settings |
| DuckDuckGo browser | Built in | On by default |
| Chrome, Safari, Edge | Not built in | Add an extension such as Privacy Badger, Disconnect, or OptMeowt |
Supported browsers and extensions per the official list at globalprivacycontrol.org.
That gap is closing by law. California's Opt Me Out Act (AB 566) was signed on October 8, 2025 and requires browsers offered in the state to include an opt-out preference signal, effective January 1, 2027. CPPA Executive Director Tom Kemp put the reasoning plainly: "Every Californian deserves control over their personal information without having to jump through countless hoops."
Does anyone actually honor it?
Enforcement is real but uneven, which is the honest answer. Companies have been penalized specifically for ignoring the signal, so it is worth turning on, but you should not assume every site obeys it.
California's first big case was Sephora, which paid $1.2 million in 2022 to settle allegations it failed to disclose that it sold personal information and failed to process opt-out requests sent through Global Privacy Control. In September 2025 the California Privacy Protection Agency fined Tractor Supply $1,350,000, its largest penalty to date, over CCPA violations including a failure to process opt-out preference signals. Days earlier, on September 9, 2025, the attorneys general of California, Colorado, and Connecticut announced a joint investigative sweep of businesses failing to honor GPC.
Step two: use the ad industry's own opt-out tools
The advertising industry runs voluntary opt-out tools that cover participating companies. They are worth 10 minutes, but go in with clear expectations: they are voluntary, they are tied to one browser, and they are easy to wipe out by accident.
The Digital Advertising Alliance's WebChoices tool at optout.aboutads.info is the main one, with AppChoices as the mobile equivalent. The other big name is gone: the Network Advertising Initiative shut down its opt-out tool for cookie-based and probabilistic interest-based advertising on September 15, 2025, so old links to it no longer do anything.
Two limits matter. The DAA states that choices set by WebChoices are associated with the browser and device you used, not all your browsers and devices, and it recommends the Protect My Choices extension to stop cookie clearing from erasing them. It also states that after you opt out, participating companies and the sites you visit may continue to collect and use information for other purposes.
Step three: shut off your phone's advertising ID
Your phone hands apps a unique advertising identifier, and that ID is the hinge that links app activity to the profiles brokers sell. Both platforms let you break it, and this is the single highest-value 60 seconds on this list.
On iPhone or iPad, open Settings, then Privacy and Security, then Tracking, and turn off "Allow Apps to Request to Track." Apple states that every app requesting to track is then treated as if you tapped "Ask App Not to Track," and that while the setting is off, apps that request to track cannot access the advertising identifier.
On Android, open Settings, then Privacy, then Ads, and tap "Delete Advertising ID." Google's developer documentation is blunt about the effect: any attempt to access the identifier afterwards receives a string of zeros instead. Deleting is stronger than resetting, which just issues a fresh ID.
Step four: turn off personalized ads in your Google account
Google runs its own profile of you across Search, YouTube, and partner sites, separate from anything above. You control it in My Ad Center, where turning personalized ads off also deletes the category information Google had built up about your interests.
Expect the ad count to stay the same. Google's own description is that with personalization off, ads are based on general factors such as the time of day or the topic of the video, website, or app you are viewing. Fewer ads is not what any of this buys you. Less specific ads is.
Step five: cut the supply at the brokers
Every switch above is downstream. The profile itself is still sitting in broker databases, being sold, and it is the reason your name, address, phone, and relatives are one search away from anyone. Removing those listings is the part that shrinks the underlying record rather than the ad it produces.
Every major people-search site has a free opt-out, usually a form plus an emailed confirmation link, and most verified requests process within 24 to 72 hours. We publish step-by-step opt-out guides for the major brokers, each verified and dated. Our full data broker removal walkthrough covers the order to do them in, and who buys your phone's location data goes deeper on the mobile side of this market.
Expect to repeat it. Brokers continuously re-ingest public records and buy from each other, so listings commonly reappear within three to six months.
If you live in California, use DROP too
California residents get a shortcut nobody else has. Under the California Delete Act, the state runs a free platform called DROP, the Delete Request and Opt-out Platform, that sends one deletion request to every registered data broker at once, more than 500 of them.
Consumer sign-ups have been live since January 2026, and from August 1, 2026 registered brokers are legally required to process those requests. It only reaches registered brokers, and only helps Californians, but it replaces dozens of forms with one. Our California DROP guide has the steps, and what "Do Not Sell My Personal Info" actually does explains how that link relates to the signals above.
A realistic 30-minute plan
Do these in order and stop whenever you run out of patience, because the list is sorted by payoff per minute. The first three steps take about five minutes together and cover the mechanisms with the most legal weight behind them.
- Turn off the advertising ID on your phone (one minute, both platforms).
- Enable GPC in Brave, Firefox, or DuckDuckGo, or install a GPC extension in Chrome.
- Turn off personalized ads in Google's My Ad Center.
- Run the DAA WebChoices tool, then install Protect My Choices so clearing cookies does not undo it.
- Start opting out of the top data brokers, and if you are in California, file a DROP request.
- Put a reminder in your calendar for three months from now to re-check.
See what is out there first
Run a free exposure scan to see which data brokers likely list you, plus any breaches tied to your email. No account, and nothing you scan is stored.
Frequently asked questions
What is the fastest way to opt out of targeted advertising?
Turn on Global Privacy Control in a browser that supports it, such as Brave, Firefox, or the DuckDuckGo browser. It sends an automatic opt-out to every site you visit, and in California and Colorado covered businesses are legally required to honor it.
Does Global Privacy Control work in Chrome or Safari?
Not natively today. Chrome, Safari, and Edge do not ship a built-in Global Privacy Control setting, so Chrome users need an extension such as Privacy Badger, Disconnect, or OptMeowt. California's Opt Me Out Act, signed October 8, 2025, will require browsers offered in the state to include an opt-out preference signal starting January 1, 2027.
Is Global Privacy Control legally binding?
In some states, yes. Colorado's Attorney General lists GPC as the only recognized universal opt-out mechanism, and since July 1, 2024 covered businesses there must let people opt out of sale and targeted advertising through it. California regulators have fined companies for ignoring it, including a $1,350,000 penalty against Tractor Supply in September 2025.
What happened to the NAI opt-out page?
The Network Advertising Initiative shut down its opt-out tool for cookie-based and probabilistic interest-based advertising on September 15, 2025. The Digital Advertising Alliance's WebChoices tool at optout.aboutads.info is the remaining industry option, along with AppChoices for mobile.
Do ad-industry opt-outs stop companies from collecting my data?
No. The Digital Advertising Alliance states that after you opt out, participating companies and the sites you visit may continue to collect and use information for other purposes, and you will still see ads, just ones not based on interest data.
How do I turn off ad tracking on my phone?
On iPhone or iPad, go to Settings, then Privacy and Security, then Tracking, and turn off "Allow Apps to Request to Track." On Android, go to Settings, then Privacy, then Ads, and tap "Delete Advertising ID." Apps that try to read the deleted Android ID receive a string of zeros.
What do data brokers have to do with the ads I see?
Brokers supply the identity and location data that ad platforms match to your device. The FTC's cases against X-Mode/Outlogic, InMarket, and Kochava all describe location data flowing from apps into brokers and out to advertisers, which is why removing yourself from broker files reduces the raw material behind targeting.
Will opting out of targeted ads mean I see fewer ads?
No, you will see roughly the same number of ads, just less specific ones. Google states that with personalized ads off, ads are based on general factors like the time of day or the topic of the page you are viewing rather than your saved activity.
Sources: globalprivacycontrol.org (supported browsers and extensions); Colorado Attorney General, Universal Opt-Out Mechanism list; California Attorney General (Sephora settlement; the September 9, 2025 CA/CO/CT sweep); California Privacy Protection Agency (Tractor Supply order; AB 566, the California Opt Me Out Act); Digital Advertising Alliance and YourAdChoices (WebChoices, AppChoices, NAI tool shutdown); Apple Support (App Tracking Transparency); Google Play developer documentation and My Ad Center Help (advertising ID, personalized ads); Federal Trade Commission press releases (X-Mode/Outlogic, InMarket, Kochava).