Privacy policy
Last updated: October 29, 2026
JE CONSEIL (“we”), a company based in France and the publisher of Remove Me, decides how your personal information is used. This page explains what we collect, why, who receives it, how long we keep it and how to exercise your choices. It applies to the version of the site for the United States.
What we collect
- What you enter in the form: first name, last name, country, ZIP code, state and city, email addresses, phone numbers and optional identifying details.
- What the scan produces: web pages mentioning your information, data breaches linked to your emails, data brokers that may hold your data, and your answers to the questions asked during the scan.
- Technical data: an encrypted (hashed) fingerprint of your IP address, browser, landing page and campaign parameters (utm_source, etc.), and usage events (code entered, result dismissed, etc.).
Why we use it
| Purpose | Details |
|---|---|
| Run your scan and give you access to the report (including sending the code) | Needed to provide the service you asked for |
| Send you a reminder about your report ("Your report is ready") | Tied to the service you requested |
| Send you information about our offers | Only if you ticked the box to receive it; you can withdraw at any time |
| Protect the service against abuse (rate limiting, anti-bot) | Security |
| Measure where visits come from and improve the service | No cookie and no advertising tool (cookie-free Vercel Analytics) |
| Show, on the home page, a masked preview of the passwords found for the address you enter, and keep that address to monitor use of the service | Display limited to a few characters of each password, and a limited number of attempts |
Excerpts of web pages found during the scan are sent to an AI model to decide whether they concern you. No decision with a legal effect about you is taken on this basis: the result is an informational report that you can correct.
Sale, sharing and advertising
We do not sell your personal information. We do not share it with third parties for cross-context behavioral advertising, and no advertising tool (Meta, Google Ads, etc.) is active on this site at present. We do not track you across other websites. We do not knowingly collect information from children under 13; the service is intended for adults.
Who receives your data
We use the following service providers, who process data on our behalf to run the service. Some are in the United States, some in the European Union. Your scan data is stored in the European Union, so it leaves the United States when you use the service.
| Provider | Role | Data concerned | Location |
|---|---|---|---|
| Vercel Inc. | Hosting of the site and server functions (Paris region); cookie-free audience measurement (Web Analytics, Speed Insights) | IP address, requests, page views, device and browser type, loading performance | United States |
| Supabase | Database (Paris) | Identity, email, scan results | European Union |
| Inngest | Running the scan in the background | Scan identifier, intermediate scan results | European Union; history kept for 24 hours |
| Serper | Search of the public web | Name, city, emails and phone numbers entered, as search queries | United States |
| Have I Been Pwned | Search for data breaches | Email address | Service run from Australia, hosted by Cloudflare |
| LeakCheck | Search for data breaches: values found (name, phone, address, passwords, usernames, IP), kept only in masked form | Email address | Third-party breach search service; location not specified by the provider |
| Anthropic | Review of results by an AI model | Name, city and excerpts of web pages found | United States |
| Resend | Sending emails (verification code, report ready) | Email address, first name | United States |
| Cloudflare | Anti-bot check (Turnstile) | IP address, browser signals | United States |
| Upstash | Request rate limiting (Redis database, EU) | Encrypted fingerprint of the IP and email | European Union |
| Google (icon service) | Display of the icon of the sites cited in the report | Domain name of the cited site, without your identity | United States |
Breach data and masked passwords
To tell you whether your email address appears in known data breaches, we query Have I Been Pwned and LeakCheck. LeakCheck can return values that were exposed in a breach, such as passwords. We show only a masked version (a few characters visible, the rest hidden) and we never show or store the full value. The full preview is available only after you enter the 6-digit code sent to your email address.
How long we keep it
| Data | Duration |
|---|---|
| Scan and results | 30 days after the request, then automatic deletion |
| Technical event log | 13 months, then automatic deletion |
| Contact details (contact record) | 3 years after the last contact, only if you agreed to receive our information |
| Verification code | 30 minutes (kept as an encrypted fingerprint) |
| Home page breach preview | Email address entered, test result and number of attempts: 12 months after the last attempt, then automatically deleted; masked preview kept for 24 hours under an encrypted fingerprint key, to avoid repeated lookups |
Your choices and rights
Depending on where you live, a state privacy law (for example the California Consumer Privacy Act, as amended) may give you the right to know what personal information a business holds about you, to delete it, to correct it, to opt out of its sale or sharing, to limit the use of sensitive personal information, and not to be treated differently for using these rights. Whether such a law applies to us depends on factors such as the size of our business and the number of residents whose data we handle. Whatever the answer, we handle these requests from anyone in the United States: write to contact@remove-me.io to ask to see, correct or delete your information, or to stop receiving our emails. We aim to reply within 45 days. We may need to confirm that the request comes from you, and we will only ask for what is necessary.
You can also delete your scan data sooner than 30 days by asking us. If you think we have not handled your request properly, you can contact your state attorney general's office, or the Federal Trade Commission at reportfraud.ftc.gov.
Emails
We send transactional emails (your verification code, your report is ready). If we send you marketing emails, we will follow the CAN-SPAM Act: accurate sender information, a clear way to unsubscribe in every message, and no further marketing emails after you opt out, which we will honor within 10 business days.
Changes
If we change this page in a way that matters, we will update the date at the top. Cookies are covered on the Cookies page.