At MarketOps/DealerX, we take consumer privacy seriously and maintain full compliance with both the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA). Our commitment to transparency, accountability, and user empowerment guides every aspect of our data handling practices.
Visibility ≠ Compliance: Why Indexing Is Not a Privacy Requirement
There has recently been some discussion around the visibility of our privacy-related web pages in search engine indexes. We want to be clear: there is no legal or regulatory requirement under California law mandating that these pages be indexed by Google or any other search engine.
In fact, publicly indexed pages are statistically more susceptible to malicious activity, including denial-of-service attacks, scraping, and malware injection. These risks exist even for highly secure and compliant sites.
While we were previously unaware of any “noindex” or “nofollow” settings affecting specific pages, we now recognize that such configurations offer important security and operational benefits — and are not at odds with compliance.
Our Tools Are Built for Access, Not Obscurity
Regardless of search engine visibility, our privacy tools are built with accessibility in mind. Our California privacy rights framework is fully implemented across our website and enables residents to easily exercise their rights — including the right to opt out of the sale or sharing of personal information — without navigating through layers of legal jargon or buried links.
These tools are prominently displayed, easy to understand, and efficient. In fact, we’ve already processed thousands of verified consumer requests without receiving a single complaint, which we view as a strong validation of our user experience and compliance efforts.
We also publish relevant privacy request statistics in a transparent manner, ensuring we meet our obligations and uphold the trust of our users.
Preparing for California’s DROP System
Looking ahead, California’s privacy landscape is evolving once again with the implementation of the Delete Request and Opt-Out Platform (DROP) — a centralized, state-run system launching by January 1, 2026 under the Delete Act (SB 362). This one-stop platform will allow California residents to submit a single deletion or opt-out request that is automatically routed to all registered data brokers.
As a registered data broker, we pay an annual fee to the California Privacy Protection Agency (CPPA), which in turn funds the development and maintenance of this DROP system. We view this as a meaningful step toward simplifying privacy rights for consumers while reinforcing compliance expectations across the industry.
Once DROP is live, it will provide a centralized and streamlined mechanism that renders any debate over page indexing essentially moot — consumers will have a direct, authoritative channel to exercise their rights, independent of individual web page configurations.
Commitment to Transparency and Privacy
We remain committed to:
-
Meeting and exceeding all legal obligations under California privacy law.
-
Offering user-friendly tools that respect and honor consumer privacy rights.
-
Providing full transparency about how we manage, protect, and process consumer data.
Privacy Options