· via dev.to (home feed)
iOS 27.3 Beta Lets Safari Ask Websites Not to Sell or Share User Data
Apple's iOS 27.3 beta includes a Safari toggle that sends the Global Privacy Control signal, asking sites not to sell or share user data, and website owners now have to decide how to respond.

Apple has placed a standardized privacy opt-out inside Safari's settings in the iOS 27.3 beta, and website owners now have a concrete decision to make about whether, and how, to honor it.
According to 9to5Mac, which reported the feature on November 11, the toggle sits at Settings > Apps > Safari > Advanced > Use Global Privacy Control. When switched on, Apple's description says Safari will ask websites not to sell or share the user's data, alongside a caution that it "may cause some websites to not function properly or work at all." A post on dev.to points out that the support page linked from the beta is not live yet, so the details should firm up by the time the update ships publicly.
A signal that already exists
Global Privacy Control, or GPC, is not an Apple invention. It is an open specification that some privacy-oriented browsers and extensions already transmit. What changes with iOS 27.3 is reach: Safari ships on every iPhone, and the opt-out becomes a single toggle rather than an add-on installed by enthusiasts.
The dev.to author compares the mechanism to a sticker on a mailbox asking for no junk mail: every delivery service can see it, but only the law can force them to obey it. Per 9to5Mac, the signal currently carries legal weight in only a handful of US states, and most websites have not built support for it.
That limited footing is why observers remain cautious. Nick Heer of Pixel Envy, quoted in 9to5Mac's coverage, called GPC "effectively a replacement for Do Not Track with legal muscle." The comparison cuts both ways. Do Not Track asked sites to stop tracking voluntarily, no law required compliance, and the industry ignored it into irrelevance. GPC has partial legal backing that Do Not Track never had, but only in some jurisdictions.
Consent banners are not disappearing yet
For European sites, the immediate effect may be small. The dev.to author writes that, as far as they know, a GPC signal is not yet treated under EU rules as a complete answer to consent requirements, so a European site may still display its cookie banner even with the switch on. And wherever honoring the signal is optional, ad-funded sites have a clear financial reason to keep ignoring it.
What honoring the signal involves
For developers and site owners, the dev.to post sets out a short checklist:
- Browsers with GPC enabled send an HTTP header: Sec-GPC: 1.
- JavaScript can read navigator.globalPrivacyControl, which returns true when the signal is active.
- If a site already offers a "do not sell or share my information" opt-out, a GPC signal should be treated as that opt-out having been used: suppress advertising and marketing pixels that sell or share data, and remember the choice.
- Test in a browser that already supports GPC, and in Safari once iOS 27.3 is released.
The author estimates that for most small products this is an afternoon of work, and that respecting the signal earns an honest line for a privacy policy. The other side of the ledger is real, too: businesses that live on advertising revenue lose money when they honor GPC. The author acknowledges that cost while arguing it is better to act now than to have a regulator impose the requirement later.
Why it matters
Once the toggle ships, GPC stops being a niche signal and becomes something mainstream iPhone users can enable without knowing anything about the specification behind it. In the US states where GPC has legal force, a site that ignores it is not just unhelpful; it is disregarding a legally recognized opt-out request. Wiring the signal into an existing "do not sell or share" flow is inexpensive insurance against that risk, and it scales far better than betting that users never find the setting. Apple's own warning about breakage also means support teams should expect strange-behavior reports if adoption grows. The Do Not Track precedent shows what happens to voluntary signals with no law behind them; a signal with partial legal backing and one-tap distribution on the iPhone has a materially better chance of sticking.
- #privacy
- #safari
- #ios
- #web
- #compliance