> If users prefer to forgo personalization we respect these privacy settings and allow users to opt-out.

Could you point out where this is in your privacy policy? My admittedly-basic reading seems to show the opposite. https://www.mutinyhq.com/privacy says this:

"“Do Not Track”. Do Not Track (“DNT”) is a privacy preference that users can set in certain web browsers. Please note that we do respond to or honor DNT signals or similar mechanisms transmitted by web browsers."

If, as you note, you respect users' privacy settings, why don't you honor Do Not Track? Forgoing personalization is the whole reason that DNT exists.

If this was an oversight, how about updating your service's behavior and the privacy policy?