Privacy Policy
What we collect, why we collect it, and the rights you have over it.
Our Privacy Commitments
We're a company whose entire product is getting your personal information off other people's servers. It would be indefensible to be careless with it ourselves. So these are the commitments this policy is built around, stated up front rather than buried:
- We never sell your personal information. Not now, not as a "future business model," not in aggregate, not de-identified, not under any other name for the same thing. We have never sold personal data and we do not intend to build a business that does.
- We never share your personal information for advertising. We run no advertising, remarketing, or cross-site tracking tags. Nothing you submit is used to target ads to you or anyone else.
- Your identity data never leaves the removal pipeline. The names, date of birth, and addresses you give us are used to find and remove your listings — and for nothing else. They are never sent to our analytics provider, never used for marketing, and never disclosed to anyone except the specific data broker you have authorised us to submit a removal to.
- We ask for the minimum that actually works. Data-broker records are indexed by name, age, and location, so name, date of birth, and address are what a search genuinely requires. We don't ask for a Social Security number, we don't ask for a government ID, and we don't ask for payment or financial details.
- We tell you what isn't finished yet. Where a protection is planned rather than live, this policy says so plainly instead of implying more than is true.
Introduction
At Delist My Data, accessible from https://delistmydata.com, the privacy and security of our visitors is a top priority. This Privacy Policy describes what personal data we collect, why we collect it, how we use and protect it, and what rights and choices you have. Accounts are currently open by invitation, and the automated filing of removals is being rolled out to them in stages. We've written this policy to reflect what actually happens today and what will happen as that rollout completes, rather than generic language borrowed from other kinds of services.
This policy applies to information collected through our website and your account only. It does not cover data collected offline or via third-party services that link to or from our site.
By accessing or using Delist My Data, you acknowledge that you have read and agree to this Privacy Policy. Questions or requests may be sent to contact@delistmydata.com.
Definitions
- Personal Data: Any information relating to an identified or identifiable person, including name, address, phone number, date of birth, email, IP address, and online identifiers.
- Processing: Any operation on personal data, including collection, storage, use, transfer, and deletion.
- Data Controller: Delist My Data, determining the purposes and means of processing personal data on Delist My Data.
- Sell / Share: Used as CCPA/CPRA defines them — disclosing personal information to a third party for money or other valuable consideration, or for cross-context behavioural advertising. We do neither.
- You / User: Any individual accessing or using Delist My Data.
Information We Collect
1. Information you provide directly
- Account details: your email address, and either a password — which we store only in a form we cannot read back — or a Google account you choose to sign in with, from which we receive the name and email address on that account. There is no payment step, and we collect no payment details.
- Invitation details: accounts are currently created by invitation. Where an invitation was issued to a particular email address, we keep that address and a record of which account redeemed it.
- Waitlist email: if you join the waitlist, the email address you give us, so we can offer you an account when one is available.
- Removal-search details: the names you are listed under (including former or alternate names), your date of birth, and your addresses (including previous addresses, which is how brokers index historical records). These are the requirement, and they exist for a specific reason: broker listings are matched on name plus age plus location, so without a date of birth we cannot tell your record apart from a stranger who shares your name — which risks both missing your listing and requesting removal of someone else's.
- Optional contact details: phone numbers and additional email addresses, if you choose to provide them. Some brokers' opt-out flows send a confirmation link or code to the email or phone on the listing; without them, those specific removals may not be completable. You can leave them blank.
- Your removal authorization: before we file removals on your behalf, you sign an authorization appointing us as your agent for that purpose. We keep the name you type as your signature, the state you tell us you live in, the date and time you signed, and the network address and browser the signature came from — together, the record of exactly what you authorised and when.
- Correspondence: anything you send us by email, so we can answer it.
2. Information we generate on your behalf
- Matches: records of data-broker listings that appear to match the identity you submitted, including the broker's URL and the listing text as the broker published it.
- Screenshots: images of the matching listing pages, captured as evidence of what was found and, later, of what was removed.
- Reports: downloadable summaries of what a search found, prepared for you to keep.
- Removal correspondence: once removals are filed for you, our exchanges with each broker about your request — what we sent, what they replied, and whether they confirmed.
3. Automatically collected data
- IP address, browser type and version, operating system, and device type
- Pages visited, time and date of visit, duration, and referring URL
- HTTP request headers and server log data
- Sign-in records: the network address and browser each sign-in to your account came from, kept for the life of that sign-in to secure your account and detect misuse.
Your IP address is also used transiently to rate-limit sign-in, sign-up, and data-entry attempts against automated abuse. It is held briefly in our own server-side cache for that check and is not written to a user profile.
4. Analytics
We use Google Analytics 4 to understand how people find and move through this site — which pages get read, which guides are useful, where visitors arrive from. This is measurement, not advertising. Details, including how to opt out, are in the next two sections.
Analytics and Advertising
We think you're entitled to know exactly what runs on this site, so here it is in full.
What we run: Google Analytics 4, loaded on every page in production. It records the automatically collected data described above — pages viewed, approximate location derived from IP, device and browser, referring source — and attributes them to a randomly generated identifier stored in a cookie on your device.
How we've restricted it: we configure the tag with Google Signals and ads-personalisation signals switched off. That means our analytics data is not fed into Google's advertising-personalisation systems and is not used to build cross-site advertising profiles from our traffic.
What we deliberately do not run: no advertising or remarketing tags, no conversion pixels, no Meta/Facebook Pixel, no Hotjar or other session-recording tools, no cross-site tracking of any kind. We previously carried a Google Ads tag on this site; we removed it, because a remarketing tag is difficult to reconcile with the commitments at the top of this page.
What analytics never sees: nothing you submit to the removal service. Names, dates of birth, addresses, phone numbers, matches, screenshots, reports, and your signed authorization are never sent to Google Analytics or any other analytics provider.
How to opt out: install Google's official Google Analytics Opt-out Browser Add-on, block or delete analytics cookies in your browser settings, or use any content blocker — the site works fully without analytics. You can also write to contact@delistmydata.com and we will confirm the exclusion.
How We Use Your Information
We process personal data for the following purposes:
| Purpose | Examples | Legal Basis (GDPR) |
|---|---|---|
| Service Delivery | Searching data-broker sites for your listings, showing you what was found, generating and submitting removal requests, and re-checking whether removed listings return | Contract / Legitimate Interests |
| Removal Authorization | Recording the authorization you signed, and producing it when a broker asks on whose authority a request was made | Contract / Legal Obligation |
| Account Security | Confirming your email address, keeping sign-in records, rate-limiting abusive traffic | Contract / Legitimate Interests |
| Support | Responding to questions or requests sent to us directly | Legitimate Interests |
| Analytics | Measuring site traffic and which pages are useful, via Google Analytics 4 | Consent / Legitimate Interests |
| Security & Fraud Prevention | Detecting malicious activity and protecting the service | Legitimate Interests |
| Legal Compliance | Meeting regulatory or court-ordered obligations | Legal Obligation |
We do not use your personal data for automated decision-making that produces legal or similarly significant effects, and we do not profile you for marketing.
Cookies and Tracking Technologies
Delist My Data sets two categories of cookie, and no others. We set no advertising cookies and no cross-site tracking cookies.
| Category | Cookies | Purpose | Duration |
|---|---|---|---|
| Strictly Necessary | _delistmydata_session | Core functionality, security, form protection. Cannot be disabled. | Session |
| Strictly Necessary | session_id | Keeps you signed in to your account. Set only when you sign in. Removed when you sign out or close your browser, and no longer accepted after 10 minutes without activity or 12 hours in all. | Session, 12 hours at most |
| Analytics | _ga, _ga_* | Google Analytics 4: distinguishes returning visitors and sessions so we can count traffic. No advertising use. | Up to 2 years |
You can control or delete cookies through your browser settings, and you can block the analytics cookies specifically using the opt-out methods above. Disabling strictly necessary cookies will prevent you from signing in; disabling analytics cookies has no effect on the site at all.
We do not currently display a cookie consent banner. If you are in a jurisdiction that requires prior consent for analytics cookies, we would rather tell you that plainly than pretend otherwise — adding a consent gate is on our list, and until it ships you can opt out using the methods above.
How We Share Your Information
We do not sell your personal information, and we do not share it for cross-context behavioural advertising. There is no exception to this and no version of our business that depends on one. Data is disclosed only in these limited circumstances:
- Data Brokers, Under Your Authorization: when we file a removal for you, we send that broker only the personal information it requires to locate and remove your listing — often just a name and a link to the listing — and we do so under the authorization you signed. This is the whole point of the service, and we send the least the broker will accept.
- Infrastructure Provider: our service runs on Amazon Web Services in the United States, which hosts our systems, stores the files we generate for you such as screenshots and reports, and delivers the email we send you. AWS processes this data on our behalf and may not use it for its own purposes.
- Sign-in Provider: if you choose to sign in with Google, Google learns that you signed in to Delist My Data. We do not send Google anything you enter into your account.
- Analytics Provider: Google Analytics 4 receives site-usage data only — pages viewed, device, referrer, IP-derived approximate location. It receives none of your identity or removal data. Ever.
- Search and Removal Infrastructure: broker sites block automated access, so our search and removal tools route their web requests through commercial proxy and browser-automation providers. These providers carry the outbound request; they are not given your identity records as a dataset, and they are bound to process only as instructed.
- Legal Requirements: where required by law, regulation, subpoena, or court order. We will notify you before disclosing where we are legally permitted to do so, and we will push back on requests that appear overbroad.
- Safety: to protect the rights, property, or safety of Delist My Data, our users, or the public.
- Business Transfers: in a merger, acquisition, or asset sale, your data may transfer — and any acquirer would be bound by the commitments in this policy for data collected under it. You will be notified via a prominent website notice and, where feasible, by email, with the opportunity to delete your data first.
- With Your Consent: for any other purpose, with your explicit prior consent.
We do not disclose personal information to advertisers, data brokers (other than to remove you from them), marketing partners, list vendors, or "data enrichment" services under any circumstances.
Data Security
Here's where things stand today, plainly:
- Encrypted in transit. Every connection to Delist My Data is encrypted, site-wide, with no unencrypted option.
- Passwords we can't read. Your password is stored only in a form that cannot be reversed to recover it. Nobody at Delist My Data can see it.
- A sign-in ends after 10 minutes without activity, and after 12 hours however busy it's been.
- Confirmed email before anything sensitive. You must confirm your email address before your account will accept names, dates of birth, addresses, or phone numbers.
- Internal access you control. Access to removal-search data is limited to the small team operating the service and used only to run it. Separately, your account carries a setting that decides whether we may review your results and the details you gave us to search on. It is yours, and switching it off takes effect straight away. The next section says exactly what it covers.
- Encryption at rest is planned, not done. The identity data you give us, and the matches, screenshots, and reports we generate from it, are not yet protected by field-level encryption at rest. We're not going to claim it before it's true — this section will be updated the moment it ships, and it will be in place before the service holds submissions at any meaningful scale.
Our Security page goes into more detail on each of these. In the event of a personal data breach likely to result in risk to your rights, we will notify affected individuals and relevant supervisory authorities within the legally mandated timeframe (e.g. 72 hours under GDPR).
Reviewing Your Results, With Your Permission
Delist My Data is new, and the hardest part of running it is knowing whether a scan actually worked. A broker site that turned our scanner away looks, in your results, exactly like a broker site that genuinely holds nothing about you. Only a person looking at the run can tell those two apart, and telling them apart is how the scans get better.
So, with your permission, someone on our small team can open your account in an internal review tool and see:
- your scan results — which broker sites we searched for you, what each one answered, and the listings we found
- the removal requests we have filed on your behalf, and how each one is going
- the details you entered for us to search on: your names, the places you have lived, your phone numbers, your other email addresses
- your account pages as you see them, so we can catch a page that is broken or misleading rather than guessing at it from our own records
Some limits worth stating plainly:
- Never anything financial. We do not ask for a card number or a bank detail, and we hold no billing records, so there is nothing of that kind here for anyone to look at. That does not change if we start charging.
- Never your password. It is stored in a form that cannot be reversed, and that applies to us as much as to anyone else.
- Never your date of birth itself. The review tool shows the age we work out from it, because the age is what our matching actually uses.
- Looking, never acting. Someone reviewing your account cannot do anything in it. No scan can be started, no removal filed or withdrawn, nothing you entered changed. The tool refuses those actions itself rather than trusting a reviewer to hold back. A review session ends on its own after 30 minutes, or after 10 if the reviewer stops doing anything.
While we are in invited early release this permission starts switched on, and the setting on your account page turns it off in one click. From the moment you do, your results and your details are closed to internal review. Every time someone opens your account we record who it was and when, whether or not anything came of it — and you can read that record on your own account page. Our Security page describes what that record does and does not protect against.
Data Retention
We keep personal data only as long as it serves the purpose you gave it to us for:
| Data | Retention |
|---|---|
| Account details (email, sign-in method) | For as long as the account exists, and until you ask us to delete it. |
| Identity data (names, DOB, addresses, phone numbers, extra emails) | Retained while it is relevant to an active removal effort, including re-checking whether removed listings have reappeared. You can remove any of it from your account yourself, or ask us to, at any time. |
| Matches, screenshots, and reports | Retained as the evidence record of what was found and removed, for as long as the related removal effort is active. Deleted on request. |
| Your signed removal authorization | Retained even after you withdraw it. A broker may ask, long after the fact, on whose authority a request was made, and the signed record is the only honest answer — so withdrawing stops new requests but doesn't erase the record of the ones already made. |
| Removal correspondence with brokers | For the life of the related removal request, so we can show what was asked and what was answered. |
| Invitation and waitlist records | Until the invitation is redeemed or expires, or the waitlist entry becomes an account. Deleted on request. |
| Records of internal review | Kept as the account's own history of who here opened it. These are not deleted when you withdraw permission — a record that disappears when you close the door is not a record of the door having been open. |
| Sign-in records | For the life of that sign-in; removed when it expires or you sign out. |
| Google Analytics data | Retained by Google under our property's configured retention window; it contains no identity or removal data. |
| Server logs | Short-lived operational logs held within our own infrastructure. |
We do not yet enforce these windows with automated deletion for removal-search data — that's an active area of work, not a finished mechanism, and we would rather say so than describe a process that doesn't exist. You can request deletion of your data at any time and we will action it manually; see Your Privacy Rights below.
Your Privacy Rights
Depending on your location, you may have rights to access, correct, delete, restrict, object to, or transfer your personal data, and to withdraw consent at any time. You may exercise these rights by contacting us at contact@delistmydata.com. We will respond within the timeframe required by applicable law. You will never be penalised or discriminated against for exercising your privacy rights.
Some of this you can do yourself, right now: from your account you can remove any name, address, phone number, or email address you've added, and you can withdraw your removal authorization. Deleting your whole account is by email request for the moment — there is no self-service button yet, and we'll say so here when there is. Because we hold very little about you, most requests are simple to honour — and we would rather delete your data than talk you out of it.
CCPA / CPRA — California Consumer Privacy Rights
The California Consumer Privacy Act (CCPA), as amended by the CPRA, grants California residents:
- Right to Know: disclosure of categories and specific pieces of personal information collected, sources, purposes, and third parties with whom data is shared.
- Right to Delete: request deletion of personal information, subject to narrow exceptions (completing an active removal request you asked for, security, legal obligations, and the signed authorization record described above).
- Right to Correct: request correction of inaccurate personal information we hold.
- Right to Opt Out of Sale or Sharing: we do not sell personal information and we do not share it for cross-context behavioural advertising, so there is nothing to opt out of. We have not sold or shared personal information in the preceding 12 months. Because that is true, we are not required to post a "Do Not Sell or Share My Personal Information" link — and if it ever stopped being true, we would post one and say so here before the change took effect.
- Right to Limit Sensitive Personal Information: restrict use of sensitive personal information to necessary purposes only. We collect none of it: no Social Security or government ID numbers, no financial account details, no biometric data, no precise geolocation, and no account credentials beyond the password that protects your own account with us.
- Right to Non-Discrimination: we will not deny service, charge different prices, or provide lower quality because you exercised a CCPA right.
Personal information collected in the past 12 months: identifiers (name, email address, IP address); personal records (date of birth, postal address, phone number); internet or network activity (pages viewed, referring source, device and browser); and the removal authorization you signed.
Business or commercial purpose for collecting: operating the removal service you requested, recording your authorization for it, securing your account, supporting users, measuring site traffic, security, and legal compliance. Not advertising, profiling, or resale.
Submit CCPA requests to contact@delistmydata.com. We verify identity and respond within 45 days (extendable by 45 days). Authorised agents may submit requests on your behalf with proper documentation.
Other US State Privacy Rights: residents of Virginia (VCDPA), Colorado (CPA), Connecticut (CTDPA), Texas (TDPSA), Oregon (OCPA), and other states with similar privacy laws may exercise equivalent rights by contacting contact@delistmydata.com.
International Users and Data Transfers
Our infrastructure is located in the United States, so if you contact us or use the service from outside the US, your personal data is processed in the US. Where required for transfers from the EEA, UK, or Switzerland, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses. EEA and UK residents also have the right to lodge a complaint with their local supervisory authority.
Children's Privacy
Delist My Data is intended for adults. We do not knowingly collect personal information from anyone under 18. If you believe a minor has submitted information to us, contact contact@delistmydata.com and we will delete it.
Links to External Websites
Delist My Data may contain links to third-party websites, including the data-broker sites our guides describe. Once you leave our site, this Privacy Policy no longer applies. We have no control over and accept no responsibility for external sites' content, privacy policies, or practices.
Do Not Track (DNT) Signals
Some browsers transmit "Do Not Track" signals to websites. There is currently no universally accepted standard for how websites must respond to DNT signals, and at this time Delist My Data does not automatically alter its data collection in response to a DNT or Global Privacy Control signal. We would rather state that accurately than claim a capability we haven't built. In the meantime, the analytics opt-out methods described above work immediately, and the practices a DNT signal is usually meant to prevent — advertising trackers and data sales — are things we don't do at all.
Changes to This Privacy Policy
We may update this Privacy Policy periodically. When material changes are made, we will update the "Last Updated" date at the top and post a prominent notice on our website, and where feasible notify account holders via email. If we ever proposed to use your data in a way materially less protective than this policy describes, we would seek your consent rather than rely on a silent update. Your continued use of Delist My Data after any modification constitutes acceptance of the revised policy. We encourage you to review this page periodically.
Contact Us
For questions, data subject requests, or privacy complaints, please contact us:
- Website: https://delistmydata.com
- Email: contact@delistmydata.com
We aim to respond to all enquiries within 5 business days, and within applicable legal deadlines for formal data subject requests.
See also our Terms of Service and Security pages.