Privacy policy

You can use the whole checklist without giving us your name or email. We collect only the following.

The intake asks what happened, whether you've seen accounts or charges you don't recognize, which credit bureaus show the fraud, when you discovered it, and whether you know or suspect who did it. You pick every answer from a set of choices; there is no box to type in. The funnel events carry no email and no intake answers.

To stop abuse, our server reads your IP address to limit how many requests one connection can make in an hour. It keeps that count in memory only and never saves your IP address to our database.

Your checklist lives in your browser's local storage, not on our servers. Your intake answers reach us only if you reserve the paid plan. These are the items we store in your browser:

• idr_plan_v1Your intake answers, the steps you checked off and when, and, after you reserve, the email you gave and the time
• idr_vidA random visitor ID, not linked to your name or email
• idr_variantWhich version of the plan page you see
• idr_refThe tag from the link that first brought you here, if it had one

Anyone who uses the same browser can see your checklist. On a shared computer, clear this site's data when you finish.

Google Analytics. Every page loads Google Analytics, which sets its own cookies. It tells us which pages people visit and how they found the site. Google receives your IP address and information about your browser and device, and handles it under the Google Privacy Policy.

Our own event counts. On the checklist page we record the four events listed above in our own database. They use the random visitor ID in your browser's local storage and set no cookie.

Sign-in cookies. If you sign in, Supabase sets cookies that keep you signed in. If you never sign in, it sets none.

We use three services to run the site:

• Supabase hosts our database and handles sign-in, including sending the sign-in email.
• Railway hosts the website and server.
• Google Analytics measures site traffic.

When we email you about the paid plan, the message goes through our email provider.

• We never sell your data, and we never share it for advertising.
• We never ask for your Social Security number, date of birth, account numbers, or passwords. If a message that claims to be from ID-Reclaim asks for one, it isn't from us.
• We never charge you through the reservation. Nothing is charged.

We don't delete stored data on a schedule. We keep your reservation, your sign-in email, and the event counts until you ask us to delete them, or until the paid-plan experiment ends.

Data in your browser stays until you clear it. Google Analytics keeps its data for the period set in its own settings.

• Delete your data or stop email. Write to hello@idreclaim.com from the address you gave us, or reply "stop" to any email we send. We handle these requests by hand.
• Clear your browser storage. Start over on the checklist erases your checklist. To erase everything above, clear this site's data in your browser settings.
• Block Google Analytics. Block cookies for this site, use a content blocker, or install Google's opt-out browser add-on. The checklist works without Google Analytics.

The site doesn't respond to Do Not Track signals or other browser privacy signals. Google Analytics loads whether or not your browser sends one. To stop it, use one of the choices above.

ID-Reclaim is for adults. It isn't directed to children under 13, and we don't knowingly collect their information. If you think a child gave us an email address, write to hello@idreclaim.com and we'll delete it.

When we change this policy, we post the new version on this page and update the date at the top.

Questions, or a request about your data: hello@idreclaim.com.