Your rights

Five principles, most of them already yours under GDPR and CCPA.

The Attention Bill of Rights

We hold that a person's attention is their own (to see, to refuse, to move, to end, and to share in its worth) and that no platform may quietly take what it has not plainly earned.

  1. The right to see what they have.

    A full copy of everything a platform holds on you: not a summary, the file itself.

    GDPR Art. 15 · CCPA §1798.110

  2. The right to know who is watching.

    Open your own data export and the off-platform tracker list often runs to dozens (sometimes hundreds) of companies you never handed your data to directly. You have the right to know their names.

    GDPR Art. 13–14

  3. The right to take it back.

    To move your data to another service, or to have it deleted outright.

    GDPR Art. 20 · Art. 17 · CCPA §1798.105

  4. The right to a fair deal.

    Opt2In is free. Paid research, which is running now, is optional, separate from the free report, and paid: Opt2In pays you for your time, no brand ever receives your identity, what you answered reaches a brand only with every identifying detail removed, and the price is on the card before you start.

    Opt2In's pledge: a principle, not a statute

  5. The right to say no.

    To refuse targeted advertising, and to opt out of your data being sold or shared, without losing the service.

    GDPR Art. 21 · CCPA §1798.120 · §1798.125

We will never sell your data.

Every right, on Instagram.

Each right Meta must honor for Instagram, and the clock it's on once you ask. For what we hold, see our privacy policy. For what paid research keeps, see section 11.

RightMetaDeadline
See a copy of your dataGDPR Art. 15 · CCPA §1798.110Yes1 month (GDPR) · 45 days (CCPA)
Know who it's shared withGDPR Art. 13–14Yes1 month (GDPR) · 45 days (CCPA)
Delete your dataGDPR Art. 17 · CCPA §1798.105Yes1 month (GDPR) · 45 days (CCPA)
Move it elsewhere (portability)GDPR Art. 20Yes1 month (GDPR)
Correct inaccurate dataGDPR Art. 16 · CCPA §1798.106Yes1 month (GDPR) · 45 days (CCPA)
Opt out of sale / sharingCCPA §1798.120Yes15 business days (CCPA)
Object to / limit ad targetingGDPR Art. 21YesNo fixed window

Yes: a self-serve control you can use directly.

Ready to start?

Get started