DeleteMe

Collects the full suite of real-world identifiers necessary for data broker removal — name, address, date of birth, aliases, family member information, and phone numbers — plus standard account and marketing data; collection is proportionate to the service's purpose, and all Datasheet Data is described as voluntary and used exclusively to provide removals.

Datasheet Data is shared only with data brokers for removal requests; general personal data is shared with affiliates, service providers, and business partners — with partner sharing details deferred entirely to a separate Cookie Policy; the business transfer clause could expose data in an acquisition; and DeleteMe explicitly confirms it does not sell personal information.

Account self-service for updating personal information and marketing opt-out via unsubscribe are the primary user controls; CCPA and GDPR rights are confirmed; but the policy explicitly does not respond to Do Not Track browser signals, no data retention periods are specified, and rights requests are not described beyond pointing to account settings.

Specific encryption commitments (AES-256 at rest, TLS 1.2+ in transit) and MFA availability are genuine and clearly stated; no data selling is confirmed; but the primary policy is a deliberately informal TLDR that defers critical partner sharing details to the Cookie Policy, omits retention specifics entirely, and the business transfer clause provides no user protections in the event of an acquisition.