The Attention
Bill of Rights

Your attention is a finite resource. You were born owning it. At some point, without your knowledge or consent, it was turned into inventory and sold. These rights exist to name what was taken — and to take it back.

I

The right to know your value.

Every person whose attention is sold on an advertising exchange has the right to know what that attention is worth. Not an approximation. Not a range. The actual CPM advertisers pay to reach you, the actual categories they've assigned you, the actual companies bidding on your eyes. This information exists. It is about you. You are entitled to it.

GDPR Art. 15 — Right of Access · CCPA 1798.110
II

The right to see who is watching.

The average user is tracked by 70+ companies off-platform — across every website they visit, every app they open, every purchase they make. This surveillance is systematic, invisible, and profitable for everyone except the person being watched. You have the right to a complete, honest list of every entity that has purchased or received data about your behavior.

GDPR Art. 13/14 — Transparency Obligation
III

The right to your own data.

Under law, you can demand a complete copy of everything a platform holds about you — in a machine-readable format, delivered within 30 days. This right already exists. Most people have never used it. Opt2In is built on this right. Every report begins with a user exercising it.

GDPR Art. 20 — Data Portability · CCPA 1798.100
IV

The right to opt out without disappearing.

The current architecture of the web presents a false binary: accept surveillance or lose access. This is not a natural law. It is a business model. Consent to be tracked is not the same as consent to be exploited without compensation. You have the right to participate in digital life without surrendering your attention as payment — or to surrender it consciously, on terms you set, in exchange for value you receive.

GDPR Art. 7 — Conditions for Consent
V

The right to own your feed.

If advertisers pay $8–22 per thousand impressions to access your attention, Opt2In provides the alternative — completely free. We use your profile data to match you with brands that are already in your tracker list — on your terms, with your consent, at rates you can see.

Opt2In · Meta Ad Auction · Free for All Users
VI

The right to remember that you are not the user.

The free services are not free. The price is your attention, your behavior, and your identity — repackaged and sold thousands of times a day without your awareness. You are not a customer. You are inventory. Naming this is the first act of owning it.

Opt2In First Principle

“We will never sell your data. We earn by brokering direct deals between you and the brands already paying to reach you — transparently, with your consent, cutting Meta out entirely. The moment we take money to look the other way, we have become the thing we are trying to replace.”

— Opt2In Privacy Pledge · v1.0 · 2026

What the platforms are legally required to tell you.

Opt2In does not create these rights. They already exist — written into law, published in every platform's own privacy policy, and largely ignored because they are buried. This page makes them visible and actionable. Every quote below is sourced directly from official platform legal documentation. Every link goes to their actual pages. We are a flashlight, not a lawyer.

This is not legal advice. Opt2In is a data analysis tool. The rights described here are real and sourced from official legal texts and platform privacy policies. If you need legal counsel, consult a qualified attorney.
GDPR Art. 15 — Right of Access GDPR Art. 20 — Data Portability CCPA 1798.100 — Right to Know CCPA 1798.120 — Right to Opt Out
Quick Reference
Your rights at every major platform — guaranteed by law
RightMetaGoogleSpotifyAmazonLinkedInXDeadline
Download your data30 days (GDPR) · 45 days (CCPA)
See who your data was shared with30 days
Delete your data30 days
Opt out of targeted adsImmediate
See your ad categoriespartialIn data export
Opt out of data sale/sharingCCPA: 15 days to process
Correct inaccurate data30 days
GDPR — European Union
General Data Protection Regulation
Art. 15 — Right of Access: You can request everything a company holds about you. They must respond within 30 days.
Art. 17 — Right to Erasure: You can demand your data be deleted ("right to be forgotten").
Art. 20 — Data Portability: You can receive your data in a machine-readable format and transfer it.
Art. 21 — Right to Object: You can object to your data being used for profiling or direct marketing.
Full GDPR text → gdpr-info.eu
CCPA — California, USA
California Consumer Privacy Act
1798.100 — Right to Know: What personal information is collected, used, shared, or sold.
1798.105 — Right to Delete: Request deletion of personal information collected about you.
1798.120 — Right to Opt Out: Opt out of the sale or sharing of your personal information.
1798.125 — Non-Discrimination: You cannot be penalized for exercising your privacy rights.
Full CCPA text → oag.ca.gov

What each platform is legally committed to

Every quote below is from the platform's own official legal documentation. These are their words, their commitments, their URLs.

What Meta collects & sells about you
Meta collects your activity on and off Meta products, device info, transactions, information from partners, and info from other Meta companies. Used to show you ads and provide/improve Meta's products.
→ Meta Privacy Policy
Off-platform tracking — Meta's own words
Businesses that use Meta's business tools share information with Meta about your activities outside Meta — whether or not you have a Meta account or are logged in.
→ View & clear your Off-Facebook Activity
How Google personalizes ads
Google personalizes ads using signals from your Search, YouTube, location history, and browsing on sites that use Google services. Your Google account dashboard lets you see and adjust each of these in one place.
→ Google Privacy Policy
Your rights — as Spotify states them
Right of Access: Request a copy of your personal data using the 'Download your data' tool on your Account Privacy page. Includes playlists, streaming history, search queries, Inferences, Wrapped data, voice input.
Right to Erasure: Request deletion of personal data — including data processed based on consent, no longer needed, or objected to.
Right to Object to Tailored Ads: Opt out via Account Privacy → 'Tailored Ads'. Opted-out ads use only registration info and current listening — not behavioral history or third-party data.
→ Spotify Privacy Policy · Section 7
Why Amazon's data is the most valuable signal in advertising
Amazon collects your purchase and browsing history, search queries, Alexa voice interactions, Prime Video watch history, and device data. Unlike behavioral intent signals (what you searched), Amazon has actual purchase data — the highest-quality targeting signal that exists. Advertisers pay a significant premium to reach verified buyers.
→ Amazon Privacy Notice
What LinkedIn explicitly exports for you
LinkedIn is the only major platform that exports its ad targeting categories in plain English. Ad_Targeting.csv contains every demographic and professional attribute LinkedIn uses to target you — job function, seniority, company size, industry, skills. Inferences_about_you.csv lists what LinkedIn inferred about you beyond what you explicitly provided.
→ LinkedIn Privacy Policy
What X explicitly exports for you
X exports your full interest graph in personalization.js — every topic, advertiser category, and behavioral signal used to target you. ad-engagements.js and ad-impressions.js reveal which advertisers bid on your profile and which ads you interacted with. Under GDPR and CCPA, X must provide this data within 30 and 45 days respectively.
→ X Privacy Policy

If a platform ignores your request

Under GDPR, platforms must respond within 30 days. Under CCPA, they have 45 days. If they don't, you have recourse: