Your privacy
Do Not Sell or Share My Personal Information
Kumir does not sell personal information. California residents can still record a Do Not Sell or Share request, including via Global Privacy Control.
Opting out tells Kumir not to sell or share your personal information for cross-context advertising. It does not stop order, security, or fraud processing. Signed-in requests are saved to your account; otherwise we store a preference cookie.
No Do Not Sell or Share request is on file.
Privacy Choices topics
Rights
Signals
Global Privacy Control locks withdraw
Sec-GPC: 1 is treated as an opt-out. Withdraw stays disabled while GPC is on.
First-visit cookie notice is not Do Not Sell
The site chrome banner dismisses with fameo_cookie_notice. It does not invent a Do Not Sell request.
Signed-out guests use the fameo_dns cookie
Without a session, opt-out is stored on fameo_dns for one year. No account row is invented.
Signed-in opt-out writes User.doNotSellAt
A verified session stores the request on the account. Admin can see it without inventing a timestamp.
GPC beats account and cookie
privacyChoiceStatus checks GPC, then account, then cookie. None means not opted out.
Not this page
Not the mailing list
Unsubscribe removes NewsletterSignup. Privacy Choices does not stop marketing email by itself.
Not account deletion
Delete account is Account → Delete. Do Not Sell keeps the Kumir login, orders, and wallet.
Not the Privacy Policy
/legal/privacy is the policy text. This page is the Do Not Sell or Share control.
Apps & admin
iOS and Android use the same status API
Native Privacy Choices call GET|POST /api/v1/privacy-choices. This hub does not replace that contract.
Admin never invents a Do Not Sell date
adminPrivacyChoiceSummary shows on file only when User.doNotSellAt is set.
The form never fakes a GPC withdraw
While GPC is on, withdraw stays blocked. Status comes from GPC, account, or cookie.