removeme.io Privacy Policy
Effective date: November 2, 2026
Who we are and what this policy covers
removeme.io ("we," "us") is the central place to opt out of the sale or sharing of personal information collected through our websites.
This policy explains what happens to information you give us on removeme.io. Our other websites have their own privacy policies, which describe the information collected there.
Information we collect
When you opt out, we turn your phone number and email address into a one-way code (a SHA-256 hash) the moment we receive them. That hash is what we keep to honor your opt-out.
We also keep an encrypted copy of your phone number and email address for a short time, at most 24 hours, for one purpose: to tell the companies that already bought your information from us that you have opted out (see "Who we share it with"). We then delete it. We never log your phone number or email address.
| What | Why | Stored as |
|---|---|---|
| Phone number and/or email address | To recognize your information and stop it being sold | One-way hash. An encrypted copy is also kept for up to 24 hours, only to notify companies that already bought your information |
| Date and time of your request, and a reference number | To prove when we received and honored your opt-out | As recorded |
| The website that sent you here, if included in the link | To know which site your request came from | As recorded |
| IP address and browser type | To prevent abuse of the opt-out form | As recorded |
Cookies. We use two essential cookies that keep the form secure. We do not use analytics, advertising or tracking cookies.
Bot protection. The form uses Cloudflare Turnstile to tell people apart from automated spam. Cloudflare processes information from your browser, such as your IP address and device characteristics, under Cloudflare's privacy policy. We never send your phone number or email address to Cloudflare.
How we use the information
We use it only to honor your opt-out. Specifically, we use it to:
- stop your information from being sold or shared through our websites;
- let the companies we work with check whether you have opted out;
- tell companies that bought your information through our websites in the year before we process your opt-out (usually within minutes of receiving it) that you have opted out, and ask them to honor it;
- keep a record that we received and honored your request;
- protect the opt-out form from spam and abuse; and
- respond to you if you contact us.
We do not sell or share the information you give us on removeme.io, except to tell companies that bought your information that you opted out (as described below), and we do not use it for marketing. We will never contact you by phone, text or email because you opted out.
How we store and protect it
Your phone number and email address are kept as one-way hashes. A hash lets us recognize your information when it appears again, without keeping the information itself.
The only exception is the short-term copy used to notify companies that bought your information. It is encrypted with a key used for nothing else and kept for at most 24 hours. It is never included in our backups.
We also protect our systems with encrypted connections (HTTPS), restricted administrator access with two-factor authentication, and audit logs of administrator actions. No system is perfectly secure, but we design ours to hold as little about you as possible.
Who we share it with
We do not hand out a list of people who opted out. Partners ask us about information they already have, and we answer yes or no. The one time we send your details to a company is to tell it that you opted out, and only when it already bought your information from us.
- Our lead distribution platforms check each new lead before it is sold. They send the lead's contact information over an encrypted connection; we convert it to a hash immediately, check it, and discard the original.
- Companies that buy leads from us can check contacts they already hold, using hashes. We tell them only whether a contact has opted out.
- Companies that already bought your information. When you opt out, we look up your phone number and email address in the records of our lead distribution platform, LeadProsper, from up to one year before we process your opt-out (usually within minutes of receiving it). LeadProsper does not let us search further back. If a company bought your information through our websites in that time, we email that company to tell it you have opted out and to ask it to stop using and selling your information. The email includes your name, email address and phone number as that company received them, the date of the lead, and your opt-out reference number, so the company can find your record. We send these emails only to the company's compliance contact.
- Service providers that help us run removeme.io: our web hosting provider; Cloudflare, for bot protection; our lead distribution platform, LeadProsper, which we search to find companies that bought your information; and our email provider, Postmark, which delivers our notices to those companies. Postmark keeps a copy of each email it sends for 45 days, then deletes it.
- Legal requirements: we may disclose records if required by law, or to protect our rights or the safety of others.
How long we keep it
We keep your opt-out, and the hashes that identify it, for as long as we operate. If we deleted it, we could no longer honor your choice.
| Information | How long |
|---|---|
| Opt-out record and hashes | As long as we operate, so your opt-out keeps working |
| Encrypted copy of your phone number and email address, used to notify companies that bought your information | Until those companies are notified, and never more than 24 hours |
| Record of which companies we notified (no phone number or email address) | As long as we operate, as proof your opt-out was passed on |
| IP address and browser type | 24 months |
| Logs of partner checks | Up to 24 months, except checks that blocked a sale, which we keep as proof the opt-out was honored |
Your choices and rights
Your opt-out takes effect as soon as you submit the form. The companies we work with may take up to 15 business days to fully process it.
Depending on where you live, including California, Virginia, Colorado, Connecticut, Texas and Oregon, you may also have the right to:
- know what personal information we hold about you and how we use it;
- request deletion or correction of your information;
- use an authorized agent to make a request for you; and
- not be treated differently for exercising your rights.
To make a request, email us (see Contact us). Because we keep your phone number and email address only as hashes (apart from the short-term copy described above, which is deleted within 24 hours), we may ask you to provide them again so we can find your records. We will respond within 45 days, as state law requires.
Deletion and opt-outs. If you ask us to delete your opt-out record, we would no longer be able to recognize and block your information. We will explain this before acting on a deletion request.
Changing your mind. If you want to opt back in, contact us and we will confirm the request with you first.
Children
removeme.io is not directed to children under 16, and we do not knowingly collect information from children under 13.
Changes to this policy
If we change this policy, we will post the new version here with a new effective date. Changes do not affect opt-outs you have already made.
Contact us
For questions, requests, or help opting out:
- Email:
- Mail: removeme.io, 1000 Brickell Ave, Ste 715-1426, Miami, FL 33131