◉Everything here is assembled in your browser. Nothing you type is sent anywhere, stored, or logged — there is no endpoint behind these fields. (The site runs Google Ads, Meta and Whop advertising tags, none of which can read them; see the privacy policy.) Read what it produces before you send it — it is a template, not legal advice.
Where to send it
Most brokers publish a privacy contact in the site footer, usually under Privacy Policy, CCPA, or Do Not Sell or Share My Personal Information. If there's no address listed, privacy@company.com works surprisingly often.
The most reliable source is the California data broker registry — registered brokers are legally required to publish a working opt-out route there. Search the company at cppa.ca.gov/data_broker_registry.
Four rules that get requests processed
- Include the exact URL. The single biggest predictor of whether a request gets actioned. "Remove my information" without a link is unactionable.
- Cite the law by name. A request naming a statute gets routed to a compliance queue. One that doesn't gets routed to general support.
- Stay short and unemotional. These are read by underpaid support staff and sometimes by automated filters. Be the boring, easy request.
- Ask for written confirmation. It creates a paper trail, and the paper trail is what makes a regulator complaint work later.
- Don't create an account to "claim" or "manage" your profile. That converts you from a scraped record into a consenting user, and makes deletion harder to argue.
- Don't pay for anything — not a subscription, not "expedited removal", not a reputation product. Removal is a right you already have.
What to expect
| Stage | Typical timeline |
|---|---|
| Acknowledgement | 0–10 days (many never acknowledge; that's normal) |
| US state law response deadline | Commonly 45 days, extendable |
| GDPR Article 12(3) deadline | One month |
| Send the escalation | After 14 days of nothing on a web form; after the statutory deadline on a written request |
| Regulator complaint | After the escalation goes unanswered for 7 days |
Keep every reply. Written confirmations are what prove a re-listing is genuinely a re-listing rather than a request you never actually filed. The tracker is where to log them.
The Ghost Protocol has these requests as a printable appendix, alongside the full 70-broker route, the search-engine cleanup, and the monthly routine that keeps you off.
Questions
Do I have to live in California to use the US template?
No. Assert your own state's law — a growing list including Virginia, Colorado, Connecticut, Texas, Oregon, Montana and more give deletion and opt-out rights. Most large brokers apply the process nationally because running fifty different workflows costs more than honouring everyone. If your state has no statute yet, send it anyway; the worst case is that they process it regardless.
Is this legal advice?
No. It's a well-researched template. It cites real statutes and it's the wording that works in practice, but nothing here is a substitute for a lawyer if you have a genuine legal dispute.
Should I send it from my real email address?
Use a dedicated opt-out address, not your main inbox. Several brokers treat a removal request as a marketing signup. Do use an address you actually check — the reply is your evidence.