Privacy Operations

GDPR / CCPA / privacy_region self-service for the authenticated user.

All paths under /auth/user/me/privacy*. Session auth. Requires onboarding ext-privacy schema (404/400 module_not_installed otherwise). Ultra rate limit on writes: 20 / 10 minutes.

Status

• Get privacy — GET /auth/user/me/privacy

GDPR

• Post GDPR consent — POST /auth/user/me/privacy/gdpr-consent
• Delete GDPR consent — DELETE /auth/user/me/privacy/gdpr-consent (withdraw)

CCPA

• Post CCPA opt-out — POST /auth/user/me/privacy/ccpa-opt-out

Related

Business profile updates are not on privacy routes — see Business operations.

• Privacy API overview
• Privacy module
• Onboarding operations (parent module)
• Business operations
• Get current user (privacy fields also on profile GET)
• Module Hub operations

Admin

• Admin patch user privacy — PATCH /auth/admin/users/:id/privacy
• Admin API