Fuck ads, obviously, but I can understand there's confusion here.

If GPC says "do not sell my data", but the user subsequently opts in via the cookie banner (or vice-versa), you have two conflicting signals. There's no clear case law or anything that says what to do. Or what should happen if the same user sends different GPC signals depending on their device or browser.

Although I guess the easiest solution is just "do not sell data if any signal suggests it's not allowed", but that doesn't line advertisers' pockets I guess.

cry into the void, fuckers

Little reminder: the GDPR has been in effect since May 25, 2018.

Under Art. 21(5) GDPR, automated opt-out signals like DNT and GPC have to be respected. That applies to everyone providing services in the EEA.

So most of to who it applies to should already have done it since 2018.

I live dreaming of Ladybird, an independent FOSS browser which will solve all problems

Excuse me while I, sorry, need to express my desire to expand shareholder sensual fuck holes