Privacy Policy

Last updated 2026-11-13

This Privacy Policy explains what personal data Univerlist Teknoloji San. ve Tic. A.Ş. ("we", "us") collects when you use Footprint Remover at footprintremover.com (the "Service"), why, who receives it, and the choices you have. We are the data controller for this data.

Footprint Remover finds records about you on people-search sites and helps you ask those sites to delete them. To do that, we must handle some of the same personal data that you want removed. We use it only for that purpose.

1. What we collect, why, and who receives it

• Your email address. You give it to start a scan, and you verify it with a 6-digit code. Why: to search for records that contain it, to sign you in, and to email you codes and account notices. We store it encrypted, and we find it with a keyed hash. Shared with: Resend (to send the emails).
• Records that we find about you. The data that people-search sites show about you, for example your name, age, city, addresses, phone numbers, relatives and the address of the listing. We search only by the email that you give us. Why: to show you where your data is and to prepare removal requests. We store it encrypted.
• Your consent and your requests. The date and the text version of the consent that you give before the first request, each request that we prepare or send (the site, a copy of the letter, the status and the dates) and the replies that you record. Why: to act on your instructions, and to show what was sent and when. We keep this in an encrypted log.
• Your Gmail connection, if you choose to connect it. Your Gmail address and a permission token. Section 2 explains this in full.
• Purchase data. Your plan, your subscription status and your Paddle customer ID. Paddle processes your card or other payment details; we never see or store them. Why: to sell and manage subscriptions, and for tax and accounting. Shared with: Paddle, our Merchant of Record.
• Technical data. Your IP address and browser, and a CAPTCHA check. Why: to limit sign-in codes and scans, prevent abuse and keep the Service secure. Shared with: Cloudflare (network security and the Turnstile CAPTCHA).
• Messages that you send us. Your email address and the content of your message. Why: to answer you and act on your requests.

We do not sell your personal data, we do not use it for advertising, and we do not use it to train AI models.

2. Your Gmail and Google user data

You can connect your Gmail account so that removal letters go to the sites from your own mailbox. This is optional. Without it, we prepare each letter and you send it yourself.

• We ask Google only for the permission to send email on your behalf (gmail.send). We cannot read, search, change or delete your email.
• We use this permission only to send the removal letters that you approved, to the privacy addresses of the sites that show your data. We send nothing else.
• We store your Gmail address and the permission token encrypted. No person at our company reads them.
• We do not transfer Google user data to anyone, except as needed to send your letters, to comply with the law, or as part of a merger or acquisition with your notice. We do not use it for advertising or to train AI models.
• You can disconnect Gmail at any time in Settings, or in your Google Account under "Third-party apps and services". When you disconnect or delete your account, we delete the token and revoke the permission at Google.

Footprint Remover's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

3. The sites that receive your requests

When you ask us to remove a record, the site that shows it receives the data it needs to find and delete that record: usually your name, your email address and the address of the listing. The site handles that data under its own privacy policy. Some sites require you to act yourself; we then show you the steps.

4. Legal bases

• The scan, your account, your records, your requests and your subscription: performance of our contract with you.
• Requests that we send in your name: your consent and instructions. You can withdraw your consent at any time in Settings.
• Sign-in limits, CAPTCHA checks, abuse prevention and the request log: our legitimate interests in a safe and lawful service.
• Tax and accounting records: legal obligation.

5. Our service providers

These providers process data on our behalf, under contracts that require them to protect it and use it only for us:

• Amazon Web Services: hosting and database (Frankfurt, Germany)
• Cloudflare: network delivery, security, the Turnstile CAPTCHA, hosting of this website and forwarding of our support email
• Resend: sends our emails (sign-in codes and notices)
• Google: the Gmail API, only if you connect Gmail
• Paddle: checkout, payments, tax and invoicing. Paddle is the Merchant of Record and acts as an independent controller for payment data, see paddle.com/legal/privacy

We may also disclose data if the law requires it, to protect rights and safety, or to a buyer as part of a merger or acquisition, in which case this policy continues to apply.

6. International transfers

Some providers process data outside your country, including in the United States. Where data leaves the EEA, the UK or Türkiye, we rely on safeguards that the law recognizes, such as the European Commission's Standard Contractual Clauses.

7. How long we keep data

• Your account data, records, requests and the request log: while your account is open.
• If you start a scan but never verify your email, we delete the email and the results 12 months after the scan.
• Sign-in codes: deleted within one day.
• Purchase and billing records: as long as tax and accounting law requires.
• When you delete your account, we delete your email, records, requests, request log and sign-in codes, revoke the Gmail permission, and cancel your subscription.

8. Cookies and browser storage

We use only the browser storage that the Service needs: to keep you signed in, remember your last email on this device and show your latest numbers when you are offline. We use no advertising or analytics cookies and no cross-site trackers.

9. Your rights

Depending on where you live (for example under the EU or UK GDPR, Türkiye's Personal Data Protection Law No. 6698 (KVKK), or US state laws such as the California Consumer Privacy Act), you can ask to access, correct, delete or export your personal data, object to or restrict certain processing, and withdraw your consent. We do not sell or share your personal data for cross-context behavioral advertising.

You can delete your account at any time in Settings. For other requests, email support@footprintremover.com from the address on your account. We reply within 30 days. You can also complain to your local data protection authority (in Türkiye, the Personal Data Protection Authority, KVKK).

10. Security

Data is encrypted in transit. Your email, your records, your Gmail token and the request log are also encrypted in our database (AES-256-GCM), and access is limited to the people and systems that need it. If a breach affects your data, we will notify you and the authorities as the law requires. No service can be completely secure.

11. Children

The Service is for adults (18+). We do not knowingly collect data from children. If you believe a child has given us data, contact us and we will delete it.

12. Changes

We may update this policy. If a change is material, we will tell you by email or in the Service. The date at the top shows the latest version.

13. Contact

Univerlist Teknoloji San. ve Tic. A.Ş., Ege Üniversitesi Kampüsü, Erzene Mah. Ankara Cad. No: 172/69, İç Kapı No: 63, Ege Teknopark TGB Turkuaz (B) Blok, Kat 3, Ofis No BB63, Bornova, İzmir, Türkiye. Email: support@footprintremover.com.