Your Privacy Choices and Notice at Collection

Also seen as: CCPA opt-out, "Do Not Sell" link

Why do Your Privacy Choices and Notice at Collection stay in English?

Both names are pinned as literal strings in Fincanva's translation catalogues rather than left to translation. The English and Italian catalogues carry the identical value for each, and an automated test guards exactly that pairing, so a future cleanup pass cannot translate either name by mistake.

This is not a blanket rule against translating the surrounding copy. The row label and description around the "Your Privacy Choices" button ("Sale and sharing of personal information" / "Vendita e condivisione dei dati personali") are fully localized, and so is every other sentence on the page — only the two proper names named by the law hold still, because translating them would sever the control from the exact legal term a US resident is entitled to see.

Who sees these two controls?

Only a visitor Iubenda — the consent-management platform Fincanva already loads — has determined is covered by a US state privacy law. Nothing in Fincanva's own code decides this — no check on your address, your language, or your country. Fincanva reads the verdict Iubenda has already reached and shows or hides the controls accordingly.

The gate wraps the whole "Privacy" section of Settings → Security, heading included: someone the check does not apply to never sees an empty "Privacy" section, and the settings navigation drops its anchor for the same reason. The same principle governs "Notice at Collection" — the link renders nothing for a visitor the check does not cover, and nothing for a covered visitor until Iubenda has actually supplied the notice URL to link to. When the verdict cannot be read at all (an unexpected response from Iubenda's script), Fincanva treats that as "does not apply" and hides both controls rather than risk showing a US-only control to the wrong visitor.

Iubenda answers two related questions: whether a US state privacy law covers the visitor at all, and whether California's own law does. Where those two answers differ, Fincanva follows the broader one — does a US state privacy law apply — because that is the question this pair of controls is about; whether California in particular is involved is a narrower question, and the wrong one to gate them on. Under the Iubenda configuration Fincanva runs, the two answers agree for every visitor, so this changes nothing anyone sees today; it decides which answer wins if they ever differ.

Does this mean Fincanva applies different privacy rules by location?

No. The underlying consent regime — what Fincanva asks a visitor to agree to, and what the default is — is the single strictest standard (EU-style opt-in) for every visitor everywhere, with no geographic branch anywhere in the product. Geography decides only whether these two extra controls are visible, never what the consent rules themselves are. A visitor in Germany and a visitor in California both start from the identical opt-in default; the Californian additionally sees a sale/sharing opt-out button and a notice at the moment of signup, because US state law grants that specific pair of rights on top of a baseline that is already stricter than what US law alone would require.

A separate, ungated control exists for the regime everyone already has: "Manage cookie preferences" in the same Security page reopens the general cookie-consent layer for withdrawal, visible to every signed-in user regardless of location — it answers the GDPR-style "make withdrawing consent as easy as giving it" requirement, which is not a US-only right.

Where do I find Your Privacy Choices?

In Settings → Security, in its own "Privacy" section — present only for a visitor the check above applies to. The button carries the official CCPA/CPRA opt-out mark next to its label and opens Iubenda's preferences layer, where the opt-out is exercised. If that layer cannot be reached, the button shows an inline error rather than doing nothing silently.

Where do I find Notice at Collection?

Beside the consent checkbox, on the sign-up page and again on the "accept terms" re-consent screen — the two places Fincanva collects data, so the notice appears at the point collection starts, as US law requires. It links out to Iubenda's own Notice-at-Collection page — one address Fincanva configures with Iubenda, not a different page per state.

Defaults in Fincanva

• Both controls are shown only when Iubenda's jurisdiction check reports that US state privacy law covers the visitor; no verdict, or one that cannot be read, hides both. When Iubenda's own second answer — whether California's law applies — disagrees with it, Fincanva follows the broader US state privacy verdict, the question these two controls actually serve. The two answers agree for every visitor under the configuration Fincanva runs, so no visitor's experience differs because of this today.
• "Your Privacy Choices" lives in Settings → Security and is reachable at any time, matching the "exercisable whenever" requirement US state law places on this specific right; "Notice at Collection" appears only at the point of collection (sign-up, re-consent), never elsewhere.
• Both strings are identical, character for character, in the English and Italian translation catalogues.
• The consent regime that "Your Privacy Choices" and "Notice at Collection" sit beside is the same strict opt-in default for every visitor; nothing in the regime itself varies by geography.
• A separate "Manage cookie preferences" control, ungated by geography, is available to every signed-in user for withdrawing general cookie consent.

Worked example: two visitors on the same sign-up day

A visitor in Los Angeles opens the sign-up page. The consent checkbox is there from the start — it never waits on anything — and once Iubenda's script resolves her jurisdiction, "Notice at Collection" appears linked beside it. She creates the account, and later, from Settings → Security, she finds a "Privacy" section with a "Your Privacy Choices" button she can use at any time to opt out of the sale or sharing of her data.

A visitor in Milan opens the same sign-up page the same day. His consent checkbox is identical — the same opt-in default, the same required agreement — but no "Notice at Collection" link appears beside it, because Iubenda's verdict for his jurisdiction does not trigger US state privacy law. Later, in his own Settings → Security, the "Privacy" section itself does not render at all: no heading, no button, and no anchor for it in the settings navigation, because that right is not one Italian law grants him. He can still reach "Manage cookie preferences" on the same page, since that control answers a different, geography-independent question.

Related

• Account deletion — the other Settings → Security control governed by a strict, no-exceptions timeline.
• Two-factor authentication and Active sessions — the other account-security controls on the same page.