TL;DR: optout.iamnottheproduct.com hosts DataPurge, a free open-source tool that drafts deletion demands to data brokers, citing CCPA, GDPR, and every applicable state privacy law. You enter a name, email, and state. Your details stay in browser local storage. Templates fill in client-side. You click, your mail client opens, you hit send. No signup. No subscription. MIT-licensed code on GitHub. The point isn't elegance. It's making opt-outs cost brokers more than they make.
The Pitch
Hundreds of data brokers know your name, address, phone number, employer, income range, and rough political leanings. They didn't ask. You can't pull a single lever to make them stop. The big paid services charge $100-$200 a year to do it for you (Optery, Incogni, DeleteMe, Kanary) and they actually work, but they're a tax on privacy, not a fix for it.
DataPurge is the free version. It's a static site that runs entirely in your browser. Three steps:
- Enter name, email, and state.
- The tool generates pre-filled deletion emails citing the laws that apply to you.
- Click each broker. Your email client opens with everything ready. Hit send.
That's the whole thing. The site explicitly says your data is stored "only in your browser's local storage and never transmitted anywhere." The source code is public at github.com/puurpl/datapurge if you want to verify it.
What Laws It Actually Cites
This is where the tool earns its keep. Most DIY opt-out attempts get ignored because they're polite requests. DataPurge sends legal demands.
The templates cite, depending on your jurisdiction:
- CCPA / CPRA: California's right to deletion, in force since 2020, with $200/day penalties for noncompliance under the Delete Act framework
- GDPR Article 17: the EU and UK "right to erasure," 30-day response window, fines up to 4% of global revenue
- State privacy laws: Virginia (VCDPA), Colorado (CPA), Connecticut (CTDPA), Texas (TDPSA), Oregon (OCPA), Utah, Iowa, Indiana, Tennessee, Montana, Delaware, New Jersey, New Hampshire, Kentucky, Maryland, Minnesota, and Rhode Island all have variants on the books
The strongest applicable template gets selected based on your state. If you're a Californian, you get the CCPA hammer. If you're in the EU, you get the GDPR sledgehammer. New state laws keep widening the leverage, like Connecticut's data broker kill switch.
What this changes: every email becomes documented evidence of an explicit consent withdrawal. Every broker that ignores it builds future legal liability. Every one that complies has to spend staff time processing it.
How It Stacks Up Against Paid Services
Incogni / DeleteMe / Optery
Charge $80-$200/year. They handle everything: identifying brokers, sending requests, chasing follow-ups, monitoring for re-listings. Set it and forget it. Trade-off: you're handing your full identity dossier to a third-party privacy company.
California's DROP
Free, state-run, but California-only. One form, 500+ registered brokers. 215,000+ Californians used it in seven weeks. The gold standard, and the model other states are slowly copying.
DataPurge
Free, works anywhere, works for everyone. No third-party gets your data. Trade-off: you're sending the emails. No automatic monitoring, no follow-up automation. You do it once, then again in six months when your records resurface.
The honest framing: paid services save you time. DataPurge saves you money and removes the middleman. California's DROP is the only one that scales properly, and it only exists because the state forced 500+ brokers to register. For the rest of the country, DataPurge is the closest thing to it that doesn't require a credit card.
Why the "Make Brokers Pay" Argument Holds Up
The DataPurge about page lays out the asymmetry: collecting your data is trivially cheap. Removing it is brutally hard. That's the business model. Brokers like Spokeo, Whitepages, BeenVerified, and Acxiom rely on people not bothering.
Every opt-out request a broker has to process costs them money. Staff time, legal review, database operations, audit trails. The big outfits like Acxiom run profiles on hundreds of millions of Americans. A single deletion is a rounding error. A million deletions is a problem. Ten million is a business model collapse.
That's the bet behind tools like this. Not that any single email shuts down a broker, but that mass-distributed legal demands eventually flip the math: when the cost of compliance exceeds the revenue from the data, the broker stops collecting it in the first place.
It's the same logic CalPrivacy is enforcing with its Data Broker Strike Force. CalPrivacy has already fined unregistered brokers, including a $62,600 hit on S&P Global and a $45,000 fine on Rickenbacher Data for selling lists of people with Alzheimer's, drug addiction, and bladder incontinence [4].
The Catch
A few things to know before you start clicking:
- You're sending the emails yourself. The tool drafts them. Your mail client sends them. That means brokers see your real email address. Use a forwarding address (SimpleLogin, AnonAddy, Apple Hide My Email) if you don't want the receipt mail in your main inbox.
- Re-listing is a thing. Brokers buy from each other. Records that get deleted from one show up at another six months later. This isn't unique to DataPurge. It's true of every opt-out tool. Plan to repeat the process every few months.
- No auto-verification. Paid services chase brokers to confirm deletion. With DataPurge, that's on you. The site has features for tracking response deadlines and sending noncompliance notices, but it doesn't poll the brokers automatically.
- Coverage depends on the registry. The tool ships with whatever brokers volunteers have added. If a broker isn't in the registry, you can submit a report on GitHub.
What To Do Right Now
Open the tool
Go to optout.iamnottheproduct.com. Enter your details. The whole setup takes about two minutes. Bookmark it. You'll be back.
Use a forwarding address
Don't hand brokers your primary email. Generate a forwarding alias from SimpleLogin, AnonAddy, or Apple's Hide My Email. Use that as the address you submit. Compliance receipts land in a folder you can ignore.
If you're in California, also use DROP
California's DROP platform covers 500+ registered brokers in one form. Use both: DROP for the registered ones, DataPurge for everyone else.
Report missing brokers
If you find a broker that isn't in the registry, submit it via the GitHub issue template. Every addition makes the next person's purge more thorough.
Why This Matters
The data broker problem isn't getting fixed by federal law. The American Privacy Rights Act died in committee. The FTC's enforcement is slow. State laws are a patchwork. Until that changes, every meaningful opt-out happens one broker at a time, one demand at a time.
What's interesting about DataPurge isn't the tool itself. It's that it's free and open-source under MIT, with public broker data released as CC0 public domain. That means the registry can be forked, mirrored, embedded in other projects, or expanded by anyone. The economics it's trying to invert (that it's cheap to collect data and expensive to remove it) only flip if a lot of people send a lot of demands.
If you've never opted out of a single broker, this is the lowest-friction starting point we've found. Free, browser-only, no signup. Two minutes to set up. Then it's one click per broker until you're done.
References
- DataPurge: optout.iamnottheproduct.com
- DataPurge source code on GitHub
- California Privacy Protection Agency: About DROP and the Delete Act
- CalPrivacy: New Round of Enforcement Actions Against Data Brokers (January 8, 2026)
- California Office of the Attorney General: CCPA
- GDPR Article 17: Right to Erasure
Published: May 9, 2026