Short answers about how Opt Out Kit works and what it does with your information. Tap a question to open it.
Yes. No account, no ads, no paid version and nothing to upgrade to.
No. There are no cookies, analytics or ad trackers. The page's security settings tell your browser to block any connection except the password check, so this is enforced by your browser, not just promised.
Like every website, it's hosted somewhere: Cloudflare delivers the page and handles the normal connection data that any host sees. We only look at total visit counts, never at individual visitors.
No. Your browser turns the password into a 40-character code (a SHA-1 hash) and sends only the first 5 characters to Have I Been Pwned. It sends back every leaked code starting with those 5 characters, often hundreds of them, and your browser checks for a match on your device. Neither we nor Have I Been Pwned learn your password.
Checking an email means sending the address itself, and we'd rather never handle it. Have I Been Pwned is the most widely used breach database. Its free search is all you need; skip any paid plans or protection offers there.
Yes. It's open source under the GNU AGPL-3.0. You can copy and change it, but if you run a modified version as a website, you must publish your changes under the same license. That keeps every copy as open and checkable as this one.
The full source code is public on GitHub. You can also scan the site at securityheaders.com to see its security rules, or open your browser's developer tools and watch the network: the only outside request is the 5-character password lookup.
Only in this browser on this device. It isn't sent anywhere. Clearing your browser's site data erases it, and private or incognito windows don't keep it.
To keep a copy or continue on another phone or computer, tap Export progress on the home page to save a file, then Import progress on the other device. It covers every checklist.
Checking the sites automatically would mean a server sending your name and address to every people-search site, which is exactly what this tool avoids. The sites also make you confirm each removal yourself, with email links, captchas or phone codes, so no tool can finish the job for you without your details.
Each site shows the date you last changed its status. When you mark an opt-out as sent, that date is saved too, and after 60 days the site is flagged so you can check whether you've been relisted.
Those are the most widely used people-search sites, and several of them share data with others. Start there for the biggest effect.
Yes. On the home page, tap Copy summary for my AI assistant and paste it into ChatGPT, Claude, Gemini or similar. The summary lists each site's status and re-check date, plus what's left on your other checklists, and asks the assistant to set reminders. Nothing is sent until you paste it.
No assistant? Add re-check reminders to my calendar saves a calendar file with one reminder per site, 60 days after each opt-out.
Yes. The broker list is published as data, with each site's official domains. An assistant can confirm a link goes to the real site and not a look-alike. Every link on the site is also tested automatically each week.
Yes. Download the Opt Out Kit skill, then in Claude go to Customize > Skills and upload the file. Claude will then know how to set re-check reminders, verify opt-out links, explain forms and draft removal requests. It never fills out forms for you and never asks for ID numbers.
No, and you shouldn't let one. The forms need your own confirmation, and keeping them in your hands means your details go only where you choose to send them.
No. Opt-outs are always free. If a site makes you wait while it "builds a report," asks for payment or offers a background check, you're on a sales page. Use the opt-out link on the checklist instead.
Usually an email address to confirm the request, and sometimes a phone number, birth date or the link to your listing. Give only what the form requires. A separate email address just for opt-outs keeps your main inbox out of their systems.
Most sites act within a few days to a few weeks. Check back after the time the site gives you, then mark it Removed.
People-search sites rebuild their records from public records and other data sources, so listings can reappear. That's why the checklist flags opt-outs older than 60 days for a re-check.
Not directly. Once a listing is removed, it drops out of search results over time. To speed that up, or to remove results showing your phone number, address or email, use Google's "Results about you," which is on the Lock it down page.
Use a draft when a site only takes requests by email, or for companies with no form at all, such as marketing data brokers. California residents can use the deletion version, which cites state law and the 45-day response deadline. UK and EU residents can use the erasure version. The drafts are built in your browser and nothing you type is saved or sent; you send the email yourself.
They're different from people-search sites: you're their customer, so they keep your account data while you use them. You can still shrink what they store and stop it being used for ads. The big tech checklist links to each company's own directions.
Paid services submit these same opt-outs for you and repeat them on a schedule. They save time but don't do anything you can't do yourself for free here. If your time matters more than the cost, they're a reasonable choice.
Over 20 states now have one, with more taking effect through 2028. Pick your state to see what yours lets you do, draft a request citing it, or write to your representatives if your state doesn't have one yet.
Most sites on the list cover US residents. If you live in the UK or EU, data protection law gives you the right to ask any company to delete your personal data.
These sites move their opt-out pages often. Search the site for "opt out" or "remove," and please report the broken link on GitHub so it can be fixed.