The following is sufficient consent for the Video Privacy Protection Act and the California Invasion of Privacy Act, according to a recent decision in the U.S. District Court for the Northern District of California.

Cookie banner + checkbox with hyperlink to privacy notice at account creation + checkbox with hyperlink to privacy notice at each purchase + privacy notice that details data sharing with third parties via trackers.

The privacy notice in this case included the ability to:

• refuse cookies or request their deletion.
• obtain the list of partners who are permitted to store and/or access these cookies.
• adjust your browser settings to understand when cookies are stored on your device or to disable the cookies.
• object and withdraw consent to the sharing of data.