1. Natty Hatty Does Not Sell or Share Personal Information

Natty Hatty does not:

• Sell personal information

• Share personal information for cross-context behavioral advertising

• Sell comment data

• Sell login information

• Sell analytics data

• Share data with advertisers

• Use third-party ad cookies

• Conduct targeted advertising on the Blog Platform

We use only:

• Essential login cookies

• Google Analytics 4 (non-advertising mode, IP anonymized)

This means we do not “sell” or “share” data as defined under CPRA.

2. What “Sell” and “Share” Mean Under CPRA

Under CPRA:

• “Sell” means exchanging personal data for money or other valuable consideration

• “Share” means providing data to third parties for cross-context behavioral advertising

Natty Hatty does neither on the Blog Platform.

Google Analytics is used only for measurement, not for ads, profiling, or remarketing.

3. Personal Information Collected on the Blog Platform

The Blog Platform collects minimal information:

3.1 Provided by you

• Name (from your Natty Hatty Customer App account)

• Email address

• Comments and replies

• Profile photo (if enabled)

3.2 Collected automatically

• Device and browser information

• IP address (anonymized by Google Analytics)

• Login session data

• Page visit metrics

3.3 Sensitive Data

Natty Hatty does not collect sensitive personal information on the Blog Platform.

4. How California Residents Can Exercise Their Rights

Although Natty Hatty does not sell or share personal information, California residents still have the right to:

• Request access to their Blog Platform data

• Request deletion of their Blog Platform data

• Correct inaccurate information

• Request details about data collected

• Opt out of “sale or sharing” (even if not applicable)

You can submit a CPRA request at:

Subject: “CPRA Request – Natty Hatty Blog Platform”

5. Global Privacy Control (GPC)

Natty Hatty honors Global Privacy Control (GPC) signals.

If your browser is configured to send GPC:

• We automatically treat it as an opt-out request

• We will not sell or share your personal information

• We apply GPC to all Blog Platform analytics and cookies

You do not need to do anything further.

6. Opt-Out Link (For CPRA Compliance)

Even though Natty Hatty does not sell or share personal information, CPRA requires a clear mechanism for California residents.

You may submit a “Do Not Sell or Share” request here:

• Email:

  legal@nattyhatty.com

• Subject: “Do Not Sell or Share – Blog Platform”

We will confirm and process your request within statutory timelines.

7. How We Handle Opt-Out Requests

When an opt-out request is received, we will:

• Disable the association of analytics data with identifiers

• Turn off any non-essential cookies (only analytics applies)

• Respect GPC signals going forward

• Record your opt-out preference

• Avoid using your data for cross-context advertising (which we do not engage in)

There is no impact on your ability to:

• Read blog posts

• Log in

• Comment

• Access public content

8. Who We Share Data With (Not for Ads)

We only share limited personal information with service providers (“Subprocessors”) needed to operate the Blog Platform:

Natty Hatty has contracts with all service providers requiring compliance with the CPRA and other privacy laws.

9. Verification Process

For privacy reasons, we verify all CPRA requests by:

• Confirming your Natty Hatty Customer App account email

• Matching identity tokens

• Asking additional questions if necessary

We cannot fulfill requests without verification.

10. Non-Discrimination

Natty Hatty will never:

• Deny services

• Charge different prices

• Provide lower quality

• Penalize you

for exercising CPRA rights.

11. Contact Information

For privacy rights, opt-out requests, or questions: