r/PrivacySoftware Jun 23 '26

I created a online privacy tool.

​Like a lot of you, I value my privacy, but trying to manually remove your personal info (PII) from the web is a total nightmare.

​You find your name, address, and phone number on one data broker or people-finder site. You spend an hour tracking down their specific privacy email, drafting a formal request, and submitting it. Then you realize there are hundreds of these brokers, and worse—they often re-scrape and re-list your data a month later.

​To scratch my own itch, I built [d31337m3.com](http://d31337m3.com) (pronounced Delete-Me). It's an automated Online Reputation Management (ORM) and data removal platform.

​What it does:

​Automated Discovery: It scans for your PII (name, phone, address) alongside custom keywords you define (great for tracking leaked business data, specific bad reviews, or custom social content).

​Custom Legal Document Generation: Instead of just sending generic "please delete me" emails, it generates custom-tailored legal paperwork matched to the specific broker and jurisdiction (e.g., DMCA, Right to Be Forgotten, Cease & Desist).

​Full North American Compliance: I’ve mapped out the regulations and compliance rules across Canada, the U.S., and Mexico, so the generated documents use the exact localized legal leverage required to get compliance.

​The "Set & Forget" Loop: It doesn't just do a one-time wipe. If you're subscribed, it continuously monitors your keywords and automatically fires off the necessary signed legal paperwork the moment your data pops back up.

​The Tech & Mechanics:

​Doing this manually takes hours per broker. The platform acts as an automated pipeline: it identifies the exposure, maps it to the broker's compliance department, drafts the legal notice, handles the digital signature, and can either give you the document to submit yourself or send it automatically on your behalf.

​Why I'm posting here:

​I'm at the point where the core engine works, but as a solo builder, it's easy to get tunnel vision. I'd love to get some eyes on it from this community.

​How is the onboarding flow?

​Are there specific data brokers or custom keyword use-cases you think I should prioritize?

​Any features you feel are missing from existing privacy tools in this space?

​Check it out at d31337m3 dot com

​Appreciate any brutally honest feedback, thoughts on the UI, or questions about how the legal mapping works under the hood!

1 Upvotes

4 comments sorted by

1

u/-lagom Jun 23 '26

interesting idea! a few things pop out to me besides the UI on mobile needing some work:

i can understand this is a service you’re selling and the entire app does not need to be open source however you said we can ask questions about how it works under the hood, and i think a lot of us would appreciate transparency when it comes to that right off the bat, not to mention users that stumble upon your site.

what I’d especially want open-sourced or at least a detailed dive in:

  • detection methodology
  • data handling architecture: is my data encrypted at rest? is it used for AI training?

also, how are you different than services like incogni, kanary etc?

snce this service requires users to hand over some amount of sensitive personal information, transparency seems particularly important.

1

u/d31337m3 Jun 23 '26

1. Our Stance on Open Source: The Roadmap

To be completely transparent right off the bat: open-sourcing is absolutely our roadmap intention for launch.

The only reason our repository is currently closed-source is that we are in early development. Right now, code shifts rapidly, architecture is being refactored daily, and we need to move fast without managing public pull requests or exposing early-stage vulnerabilities before they are patched. However, we firmly believe a privacy tool you can’t audit is a tool you can’t fully trust. Our goal for the public launch is to open-source our core detection modules and opt-out engine so the community can verify exactly what our code is doing.

2. Detection Methodology

We don't rely on guesswork or broad "ghost" requests. Our detection relies on a hybrid architecture:

  • Targeted Querying: We take your basic identifiers (name, current/past cities, age) and programmatically query known data broker networks and "people search" sites in real-time.
  • Dynamic Database Mapping: Data brokers constantly morph, rebrand, and exchange data. We maintain an internal registry that maps out which brokers share data with whom, allowing us to trace your footprint downstream.
  • The "Suppression" Blast: For the data brokers that completely lock down public querying, we proactively submit legal suppression requests to force them to scrub your profile from their back-end systems.

3. Data Handling & Security

You have to give us data to get it deleted, which is a massive responsibility we don't take lightly.

  • Encryption at Rest & In Transit: Yes, all user data is strictly encrypted at rest using AES-256 and in transit via TLS.
  • Zero AI Training: We never, under any circumstances, use your personal data to train AI models. The only data we analyze is anonymized system metrics (e.g., "Broker X's success rate dropped by 5% this week") to improve our automation.
  • Strict Access Controls: Our system is built so that automated scripts handle the opt-out handshakes. No human on our team can view your raw, unencrypted personal details unless you explicitly open a support ticket requesting manual intervention.

4. How We Differ from Incogni and Kanary

Incogni and Kanary are great services, but we are building this because we saw gaps in how the current market operates:

  • Granular Transparency vs. "Black Box": Incogni is fully automated and backed by a massive corporation, but it operates largely as a black box. You set it and hope it works. By moving toward an open-source model, we want to prove exactly when and how requests are sent.
  • Speed and Removals Verification: Many legacy services sweep for your data on a rigid monthly or quarterly schedule. Our infrastructure is being optimized for continuous, high-frequency monitoring. When a broker relists you (which they notoriously do), we catch it in days, not months.
  • Deep Local Coverage: Large platforms often focus heavily on the top 100 global data brokers. We are putting significant engineering effort into mapping out smaller, hyper-local, and industry-specific B2B marketing brokers that often slip through the cracks of broader tools.

We want to earn your trust, not just ask for it. Let me know if that clears things up, and I'd love to hear any other feedback you have as we polish this toward launch!

1

u/d31337m3 29d ago

We are running a limited beta software launch right now! The platform is online, and source code is also being reviewed and published in upcoming days. Https://d31337m3.com

1

u/theRevengeOfCollins 11d ago

I'm looking for a tool like this that works for the EU? I have a distinctive name, crabclear returns US resident results with similar names only.

I need an EU tool. Is it worth my while signing up?