Privacy Module
Privacy is an extension of the Onboarding Module Hub package (ext-privacy.sql). It ALTERs users with GDPR/CCPA consent flags and privacy_region.
Install with onboarding target: "all" (or the privacy component after core).
Business profile updates are not here. Use Business / PUT /auth/user/me (ext-business).
Friendly rule
- Install onboarding + ext-privacy via Module Hub.
- First-run wizard may set privacy via
POST /auth/user/me/onboarding/complete(Onboarding parent). - After that, use dedicated privacy routes under
/auth/user/me/privacy*. - Profile GET (
GET /auth/user/me) also returns privacy fields when columns exist.
API
| Method | Path | Notes |
|---|---|---|
GET | /auth/user/me/privacy | Status |
POST | /auth/user/me/privacy/gdpr-consent | Consent + optional privacy_region |
DELETE | /auth/user/me/privacy/gdpr-consent | Withdraw |
POST | /auth/user/me/privacy/ccpa-opt-out | Opt-out |
Admin privacy override
Admins can override privacy via PATCH /auth/admin/users/:id/privacy — see Admin API and adminPatchUserPrivacy.
Docs
- Privacy API
- Privacy operations
- Onboarding module (parent)
- Business module (sibling component — not privacy routes)
- Complete onboarding
- Module Hub dry-run