Do Not Sell

Effective Date: April 3, 2026 | Last Updated: April 3, 2026

1. What "Sale" Means Under CPRA

Under the California Privacy Rights Act (CPRA), "sale" is broadly defined to include:

"Selling, renting, releasing, disclosing, disseminating, making available, transferring, or otherwise communicating personal information to another business or third party for monetary or other valuable consideration."

This includes sharing data with service providers or third parties in exchange for anything of value, even if not direct payment.

2. What "Sharing" Means Under CPRA

Under the CPRA, "sharing" specifically refers to:

"Sharing personal information with a service provider or contractor for purposes of targeted advertising, including retargeting, or for statistical or research purposes."

Sharing is essentially selling data to advertising partners for targeted advertising purposes.

3. Current Data Selling/Sharing Practices at Perpetua Resources Corp

Data Recipient	Purpose	Data Categories Shared	Classification
Google Analytics / Google Tag Manager	Website analytics and targeted advertising through Google Ads network	Identifiers, Internet Activity, Inferences, Geolocation	Sharing (for targeted ads)
Facebook Pixel / Meta	Audience tracking and retargeting on Facebook/Instagram	Identifiers, Internet Activity, Inferences	Sharing (for targeted ads)
LinkedIn Insights	Professional audience targeting and analytics	Identifiers, Internet Activity, Professional Info	Sharing (for targeted ads)
Twitter/X Analytics	Analytics and targeted advertising on Twitter/X	Identifiers, Internet Activity	Sharing (for targeted ads)
YouTube Analytics	Video engagement analytics and YouTube advertising	Identifiers, Internet Activity	Sharing (for analytics)

4. Your Right to Opt-Out

You have the right to direct us to not share (or sell) your personal information. This is your "right to opt-out of the sale or sharing of personal information" under CCPA/CPRA.

4.1 Opt-Out Methods

Method 1: Using This Page (Online)

To opt out through this website, use the CMP (Consent Management Platform) cookie banner or settings. Look for the "Do Not Sell or Share My Personal Information" or "Opt-Out" button to manage your preferences.

Method 2: Email

Send an email to community@perpetua.us with the subject line "Request to Opt-Out of Sale/Sharing of Personal Information" and include:

• Your name
• Email address
• Phone number (optional)
• Statement: "I request that you do not sell or share my personal information."

Method 3: Mail

Send a signed letter to:

Perpetua Resources Corp
13181 Highway 55, PO Box 429, Donnelly, Idaho 83615
Attn: Data Privacy Team
Subject: Do Not Sell or Share My Personal Information

Method 4: Online Privacy Request Form

Complete our privacy request form at perpetuaresources.com/privacy-request and select "Opt-Out of Sale/Sharing" as the request type.

4.2 Authorized Agents

You may authorize a third party (authorized agent) to submit an opt-out request on your behalf. The authorized agent must:

• Provide written authorization signed by you
• Provide proof of their own identity
• Include your authorization document with the request

5. Global Privacy Control (GPC) Signal

We honor the Global Privacy Control (GPC) browser signal. If your browser sends a GPC signal:

• Automatic Recognition: We treat a valid GPC signal as a binding opt-out request
• No Action Needed: You don't need to submit separate requests if your browser has GPC enabled
• Technical Implementation: Our systems are configured to recognize the GPC header (Sec-GPC: 1)
• Duration: Your opt-out preference via GPC remains valid for 12 months

Browser Support for GPC:

• Safari 15+ (built-in privacy controls)
• Firefox with privacy extensions
• Brave Browser (built-in)
• DuckDuckGo tracking protection
• Various GPC browser extensions for Chrome/Edge

6. Effect of Opting Out

What Happens When You Opt Out:

• We will stop sharing your personal information with analytics and advertising partners for targeted advertising purposes
• You will not see personalized ads based on your browsing behavior on our site
• We will continue to share information with service providers necessary for website functionality (hosting, security, email)
• Website functionality and performance will not be affected
• You may see more generic (non-personalized) advertising

What Doesn't Change:

• Strictly necessary cookies and functions (login, security) remain active
• Your ability to use our forms and contact us
• Core website functionality
• Our retention of your data for contractual or legal obligations

7. How to Submit Your Request

7.1 Request Information Needed

To process your opt-out request, we need:

• Your full name
• Your email address
• Your phone number (optional)
• Clear statement: "I do not want you to sell or share my personal information"
• Your signature (handwritten or typed)

7.2 Verification Process

We will verify your identity before processing your opt-out request by confirming:

• Email address associated with your account or interactions with us
• Phone number if provided
• Last 4 digits of phone or other identifying information from our records

7.3 Response Timeline

• Acknowledgment: Within 5 business days of receiving your request
• Verification: Within 10 business days, we'll confirm your identity
• Implementation: Within 45 days of verified request, we will implement your opt-out
• Confirmation: We will send you written confirmation when opt-out is complete

8. Non-Discrimination Statement

Any financial incentive program we offer will be non-discriminatory and based on legitimate business purposes (like loyalty rewards). Such programs will be disclosed clearly with their terms and how to opt-in/out.

9. Relationship to Other Privacy Rights

Your opt-out right is separate from (but complementary to) your other privacy rights:

Privacy Right	What It Does	How It Relates to Opt-Out
Right to Know	Request what personal info we collect about you	Separate right; tells you what data exists
Right to Delete	Request deletion of personal information	Separate right; permanently removes data; does not require ongoing opt-out
Right to Correct	Request correction of inaccurate information	Separate right; improves data accuracy
Right to Opt-Out (This Right)	Stop sharing data for targeted advertising	Focuses specifically on marketing/advertising sharing
Right to Limit Use of Sensitive Info	Limit use of sensitive categories	Broader control over sensitive personal information

10. Third-Party Opt-Out Tools

You can also manage your opt-out preferences through third-party tools:

• Digital Advertising Alliance (DAA): www.aboutads.info/choices
• Network Advertising Initiative (NAI): www.networkadvertising.org/choices
• European Interactive Digital Advertising Alliance: www.youronlinechoices.eu
• California Attorney General: Maintains list of opt-out mechanisms at oag.ca.gov

11. Link Back to Privacy Policy

For comprehensive information about how we collect, use, and protect your personal information, and your complete privacy rights, please see our full Privacy Policy.

For information about cookies and tracking technologies, see our Cookie Policy.

12. Contact Information

To Submit Your Opt-Out Request or Ask Questions:

• Email: community@perpetua.us
• Phone: 208-901-3060
• Mail: Perpetua Resources Corp, 13181 Highway 55, PO Box 429, Donnelly, Idaho 83615, Attn: Data Privacy Team
• Online Form: perpetuaresources.com/privacy-request