Book a free call
DROP Cycle Desk · Free checker

Am I ready for January?

Seven questions. You get your obligation map — which registries, the California deletion cycle, your dated next steps — and a readiness grade. The check runs entirely in your browser: nothing you enter is stored, tracked or sent anywhere. The only exception is the optional form at the end, which sends only what you type into it, only if you submit it.

An operations tool, not legal advice. Whether your business meets the data-broker definition is a legal determination — this checker maps the duties that follow if it does.

1 · Do you sell or share personal information about consumers you have no direct relationship with?
2 · Are any of those consumers California residents?
3 · Consumers in any of these states? (tick all that apply)
4 · Are you registered as a data broker in California for the current year?
5 · Where are you with DROP itself?
6 · When did you last process a deletion list?
7 · Where do your consumer records live?
See the format

The hash test: your identifiers never travel raw.

DROP never sends a broker a consumer's actual email or phone number — it sends SHA-256 hashes, and brokers hash their own records the same way to compare. Try it: pick a type, type a sample value, and see it standardized and hashed exactly as the CalPrivacy spec prescribes. It happens on this page, in your browser — nothing you type leaves this device, and nothing is stored. The pre-filled example is the state's own published test case, so you can watch it reproduce CalPrivacy's official answer.

Standardization rules per CalPrivacy's DROP Technical and API Reference Documentation: emails are trimmed and lowercased only; phones reduce to the last ten digits; names are folded to plain ASCII with hyphens, apostrophes and spaces removed; ZIPs keep the first five alphanumeric characters with leading zeros removed.