What information can a website collect about me without permission?

Without a single prompt, a website can read your IP address, approximate city, device type, operating system, browser and version, screen resolution, battery level, installed fonts, GPU, connected cameras and microphones, and a canvas/audio fingerprint. This page demonstrates dozens of these signals live in your own browser.

What is a browser fingerprint?

A browser fingerprint is a near-unique identifier assembled from your device's characteristics — screen size, fonts, GPU, timezone, and more. The Electronic Frontier Foundation found that only about 1 in 286,000 browsers share the same fingerprint, so most people can be recognised across sites without any cookies at all.

Can a website see my exact location?

By default a site only sees your approximate city, derived from your IP address. Pinpoint GPS location — accurate to a few metres — requires your explicit permission, but many apps and sites request it as a matter of routine.

Can websites see my other tabs or which sites I'm logged into?

No. The browser sandbox and same-origin policy stop any page from reading your other tabs, your history, or another site's data. However, a page can still detect the moment you switch away from its tab, the site you arrived from, and — sometimes — which major services still recognise your browser session.

How do I stop websites from tracking me?

Install a content blocker such as uBlock Origin, use a privacy-focused browser (Brave, Firefox, or Tor), deny camera, microphone, location, and clipboard access by default, block third-party cookies, and turn on Global Privacy Control. Together these steps cut off the large majority of trackers.

Does this website store any of my data?

No. Every reading is computed inside your browser and never leaves it, apart from one optional lookup that turns your IP address into an approximate city. Visits are measured only with anonymous, cookieless counts that cannot identify you.

Can I completely remove my personal data from the internet?

No — completely is not realistic. You can delete it from companies' own records, remove public broker listings, and stop future sale using laws like the CCPA and GDPR, which cuts exposure dramatically. But copies already sold to third parties can't be recalled, and brokers re-collect you over time, so it's an ongoing process rather than a permanent erase.

Are paid data-removal services worth it?

They save significant time by opting you out of hundreds of brokers and re-submitting as you reappear, which you'd otherwise do manually and repeatedly. They can't reach every broker or undo past sales, and you must trust them with your details, so pick one with a clear privacy policy. Doing it yourself is free but far more work.

Does deleting my data stop a company that already bought it?

Not automatically. Deleting from the broker that sold it, or opting out of future sales, stops the flow going forward but doesn't reach the buyer's copy. To remove that, you'd need to make a separate deletion request to the company that bought it, where the law gives you that right.

Can You Remove Your Data After It's Been Sold? A Realistic Guide

The honest answer is 'mostly, but not perfectly.' You have real legal power to make companies delete your data and stop selling it, and removal services can clear you from hundreds of brokers. But data that's already been sold can't be un-sold, and brokers re-collect you over time — so removal is an ongoing process, not a one-time fix.

Updated July 2, 2026 · 8 min read

What you can and can't undo

You can compel deletion from a company's own records, force brokers to remove your public listings, and switch off the ongoing sale of your data. What you cannot do is retrieve or destroy copies a broker already sold to a third party — those live on in the buyer's systems until their own retention rules or your separate request reach them. Treat removal as shrinking your footprint and cutting off the supply, not erasing the past.

Use your legal right to delete

Modern privacy laws give deletion real teeth:

California (CCPA/CPRA): you can request a business delete the personal information it holds and opt out of its sale or sharing. A Global Privacy Control signal counts as a legally recognised opt-out.
California's Delete Act adds DROP — a state-run tool letting you send one deletion request that registered data brokers must honour, instead of contacting each one individually, rolling out from 2026.
EU/UK (GDPR): the right to erasure ('right to be forgotten') lets you require organisations to delete your data where there's no overriding reason to keep it.
Other US states (Colorado, Virginia, Connecticut, Texas and more) have passed their own deletion and opt-out rights, and coverage is expanding.

Opt out of the big data brokers

Most brokers offer an opt-out or deletion page, though they bury it and often make you re-verify. You can do this yourself for free, one broker at a time:

Search your name, find your listing on each people-search site, and follow its opt-out/removal process.
Consumer Reports' free 'Permission Slip' app helps you send deletion and stop-selling requests to many companies from one place.
Keep records — brokers frequently relist you months later, so you'll need to repeat this.

Or pay a removal service to do the grind

Because manual opt-outs are tedious and recurring, subscription services automate them across hundreds of brokers and keep re-submitting as you reappear:

Examples include DeleteMe, Optery, Incogni, Kanary, and Mozilla Monitor Plus.
They reduce your exposure substantially but can't reach every broker or undo past sales — read what each actually covers.
The trade-off: you hand a company your details so it can ask others to delete them, so choose one with a clear privacy policy.

Clean up search results and ad profiles

Use Google's 'Results about you' tool to request removal of search results exposing your phone, address, or email.
Turn off ad personalisation in your Google, Meta, TikTok, and Amazon accounts, and delete stored activity/interest data.
Reset or delete your mobile advertising ID (iOS: turn off 'Allow Apps to Request to Track'; Android: delete the advertising ID).

If your data leaked in a breach

Deletion requests don't help with stolen data that's already circulating; damage control does:

Change the exposed password everywhere you reused it, and switch on two-factor authentication.
Freeze your credit with the major bureaus — it's free and blocks new accounts opened in your name.
Watch for targeted phishing that references the leaked details, and report identity theft (in the US, via the FTC's identitytheft.gov).

Set realistic expectations

You will not achieve zero exposure, and anyone promising that is overselling. A realistic goal is a much smaller footprint maintained over time: exercise your deletion rights, opt out (or pay a service to), turn off ad personalisation, and repeat the sweep once or twice a year as brokers re-collect you.

Frequently asked questions

Can I completely remove my personal data from the internet?: No — completely is not realistic. You can delete it from companies' own records, remove public broker listings, and stop future sale using laws like the CCPA and GDPR, which cuts exposure dramatically. But copies already sold to third parties can't be recalled, and brokers re-collect you over time, so it's an ongoing process rather than a permanent erase.
Are paid data-removal services worth it?: They save significant time by opting you out of hundreds of brokers and re-submitting as you reappear, which you'd otherwise do manually and repeatedly. They can't reach every broker or undo past sales, and you must trust them with your details, so pick one with a clear privacy policy. Doing it yourself is free but far more work.
Does deleting my data stop a company that already bought it?: Not automatically. Deleting from the broker that sold it, or opting out of future sales, stops the flow going forward but doesn't reach the buyer's copy. To remove that, you'd need to make a separate deletion request to the company that bought it, where the law gives you that right.