What we store, and what we don't

The kit asks for your name, city, and optionally your address, phone and email so it can write the removal letters. Those never leave your browser. The letters are assembled on your device, and when you click “Email request” your own mail program opens with the letter in it — the message goes from you to the broker, and we are not a party to it.

You can verify this rather than take our word for it: open your browser's network tab on the kit page and you will see no request after the page loads. There is also a test in our repository (tests/test_kit_is_client_only.py) that fails the build if that page ever gains the ability to send anything.

An account is optional. Everything the kit does works without one. If you make one, this is the complete list of what exists in our database about you:

• Your email address, a hash of your password (we cannot read your password), and the date you signed up.
• Your checklist: which broker sites you are tracking, the status you set for each (not started, request sent, confirmed removed, came back), and the dates you changed them. Site names and dates — nothing about you.
• Whether you asked to be told when the paid tier opens, and which part of the site you asked from.

That is all of it. We do not hold your legal name, date of birth, addresses, phone numbers, relatives, or any of the information a data broker publishes about you — not encrypted, not anywhere. There is no such field in our database, and a test asserts there isn't.

We do not file removal requests for you, and you have not appointed us as your agent. You send each request yourself. That is a deliberate limit on the free service, and it is the reason we need so little from you.

Nobody. We do not sell or share your data, we have no advertising, and we run no third-party analytics or tracking scripts on this site. The only cookie is the one that keeps you logged in, plus a token that protects forms from cross-site abuse.

The site and its database run on a server we rent from a hosting provider, who can technically access the machine as any host can. Certificates come from Let's Encrypt. That is the whole list of third parties.

While your account exists. Delete your account and the checklist goes with it — it is removed from the database, not flagged as hidden. We have no backups older than the server's own, and no archive of deleted accounts.

Depending on where you live you may have the right to see, correct, export or delete what we hold, and to complain to a regulator. Because what we hold is so small, the fastest route is simply to ask: email privacy@optstub.com and a person — currently the only person — will answer. We aim to reply within 30 days.

We are not a data broker. We do not collect or sell information about people who are not our users, and we keep no index of anyone.

The service is not intended for anyone under 16, and we do not knowingly create accounts for them.

If this changes materially we will say so here and date it. Previous versions are in our public git history.

This policy covers the free service only. A paid tier — where we would file requests on your behalf and therefore hold the information needed to match your records — does not exist yet, and will have its own policy, reviewed by a lawyer, before it takes anyone's money. This document was written by the founder, not by counsel.