Plain-English Guide
How to Remove Your Personal Information From Data Brokers, Free
One government portal, a stack of legal requests you can send yourself, and an agent that can do the typing for you.
This is a Nightschool AI guide to getting your personal information out of data brokers' hands without paying anyone. If you live in California, the state now runs a single free portal that reaches every registered data broker at once. If you don't, or you want broader coverage, you can send the same kind of request yourself under the privacy law that applies to you. And if you'd rather not do the typing, Nous Research's open-source UNBROKER skill for its Hermes Agent can search for your exposed information and file the removals for you. This guide covers all three paths, plus what to watch for before you let an agent act on your behalf.
If you live in California, submit one free request through the state's Delete Request and Opt-out Platform (DROP) at consumer.drop.privacy.ca.gov, which reaches every registered data broker, over 600 of them, after a quick residency check. If you don't live in California, or want to go further, file removal requests yourself under whichever law applies to you: CCPA/CPRA, GDPR or UK GDPR, another state's privacy law, or a plain deletion request where no specific law applies. To avoid doing this by hand, UNBROKER, an open-source skill for Nous Research's Hermes Agent, can search for your exposed data and file the removal requests for you, including California's DROP.
Published
Free lesson · no account neededMeet ClaudeWhy Claude?6 minStart the free lessonKey Takeaways
- California residents get one free government-run request, DROP, that reaches every registered data broker at once instead of hundreds of separate opt-outs.
- DROP launched January 1, 2026, and is explicitly free; data brokers must start processing requests by August 1, 2026, and status can take up to 90 days to update.
- Anyone, anywhere, can file removal requests directly with a broker under CCPA/CPRA, GDPR, UK GDPR, another applicable state law, or a general deletion request.
- UNBROKER is an open-source Hermes Agent skill from Nous Research that automates the scanning and filing, but it drives a real browser and can send email on your behalf, so its settings deserve a careful look before you run it.
- Some removals still need a human: hard CAPTCHAs, government ID checks, phone callbacks, faxes, and mailed requests are outside what any current automation handles.
The fastest path
If you live in California: use DROP
The California Privacy Protection Agency, also called CalPrivacy, runs a free consumer tool called the Delete Request and Opt-out Platform, or DROP, at privacy.ca.gov/DROP. Per that page, DROP is explicitly free: the agency states it will never charge you to use it. It launched on January 1, 2026, and by the agency's own description, it lets a California resident send one request that reaches every data broker registered with the state at once, more than 600 of them, rather than contacting each one separately.
Using it takes three steps, per privacy.ca.gov/DROP: verify that you're a California resident, create a profile with as much or as little information about yourself as you choose to share, and submit the request. Residency is confirmed through the California Identity Gateway, the state's own identity-verification layer, which lets you enter your information directly or sign in with Login.gov; you don't need to create an account with the Identity Gateway itself, and DROP states it does not retain that verification information.
You can also submit a request for someone else with their permission, such as a parent submitting for a child or a family member submitting for an elderly relative, per the same page's help section. Once you submit, data brokers are required to access DROP and begin processing requests starting August 1, 2026, at least once every 45 days, and the agency notes it can take up to 90 days before you see a status update for a given broker. You can check status later at privacy.ca.gov's DROP status page. None of this requires installing anything or paying a fee.
A separate page, privacy.ca.gov/drop-for-data-brokers, describes the business side of the same system: brokers must create a DROP account, register annually, and pay a registration fee (listed there as $6,000 for brokers, not a cost to consumers) to access the platform and process deletion lists. That fee is what funds the brokers' side of DROP; it is not something a consumer ever pays. A related state bill, AB 883, is noted on that page as tightening the broker processing window to 30 days starting January 1, 2027, down from the current 45.
Everyone else
If you don't live in California, file requests yourself
DROP only covers California residents and brokers registered with that state. Outside that, you send the request directly to each broker under whichever law gives you the right to ask.
CCPA / CPRA (California)
California's own consumer privacy law gives a right to delete personal information a business holds about you, separate from the DROP mechanism, and is the legal basis a broker cites when it processes a deletion request you send it directly.
GDPR / UK GDPR (EU / UK)
If you're in the EU or UK, the GDPR's right to erasure (and the UK's equivalent after Brexit) lets you ask any data controller, brokers included, to delete personal data about you, with limited exceptions.
Other state privacy laws
A growing number of US states outside California have their own consumer privacy statutes with a right-to-delete provision. Check whether your state has one; the request process is usually a plain email or a form on the broker's own site.
A general deletion request
If no specific law covers you, you can still email a broker and ask it to delete your information and stop selling it. Brokers vary in how they respond to a request with no legal backing, but many will still act on it.
Find the broker first
Before you can ask a broker to delete your data, you need to know it has some. California's registry at cppa.ca.gov/data_broker_registry lists every broker registered in that state, which is a useful starting list even if you don't live there.
Expect it to take time
Whether you use DROP or write to a broker yourself, processing isn't instant. Brokers can take weeks, and a broker that finds no match in its records simply holds onto the request rather than confirming a deletion.
The hands-off option
Automate it with UNBROKER, an open-source skill for Hermes Agent
If you'd rather not search dozens of broker sites and write dozens of emails, UNBROKER is an open-source skill for Nous Research's Hermes Agent, the company's own coding agent, built specifically to automate this job. Nightschool AI is an independent guide site and has not run UNBROKER itself; everything below is a description of what its README, SKILL.md, and published user-guide page state, not a first-hand account.
Per its own documentation, UNBROKER scans broker and people-search sites for a consenting person's exposed information using names, prior addresses, phone numbers, and email addresses, then submits opt-out or deletion requests, tiering each broker from fully automated to human-only and taking the highest tier it can clear. The project's README describes roughly 19 curated people-search records plus a live pull from a broader public list, and separately an ingestion of California's own data broker registry, which the README puts at roughly 545 entries. It can also run California's DROP one-shot request directly, covering every registered broker the way the manual DROP steps above do.
To use it, you install it into Hermes Agent with the command hermes skills install official/security/unbroker, then run its setup. Per the SKILL.md, the underlying engine is a small Python command-line tool, run from the skill's own directory rather than through a general code-execution tool, with a setup --auto command that detects what's available and configures itself without asking you questions, followed by a doctor command that reports whether it's ready. An intake step collects the subject's names, prior addresses, and contact details and explicitly requires recorded consent before the engine will plan or take any action; after that, you loop on a next command that returns one action at a time until the run is done.
Before you set it up, read Nightschool AI's build-your-first/hermes-agent guide to get Nous Research's Hermes Agent itself installed and working, and the hermes-agent-skills guide for how skills like this one are structured and why reading a skill's own file before enabling it is worth the few minutes it takes. This is general information about a published open-source project, not legal advice, and both the DROP program and UNBROKER's own feature set can change after this page is written.
Before you let it run
What to watch out for with UNBROKER
An agent that can browse the web and send email on your behalf is doing more than reading files, so its own documentation is worth a careful read first.
It drives a real browser
UNBROKER's README recommends a cloud browser service (Browserbase) to clear soft CAPTCHAs as part of normal operation, and the SKILL.md notes some webmail and session-bound flows instead need your own real Chrome profile rather than a headless cloud browser.
It can send email for you
Per the SKILL.md, email automation works either through your logged-in webmail in a dedicated browser session with no password stored, or through SMTP and IMAP credentials you provide. Without either, it drafts the emails for you to send yourself.
Autonomy defaults to full
The SKILL.md states autonomy is set to full by default, meaning it proceeds through submissions without asking you to confirm each step. It documents an assisted mode that asks first, which is worth turning on until you trust how it behaves.
Keep your dossier local
The subject's data is stored as plain JSON on your own machine (file permissions restricted to you) unless you turn on the skill's optional encryption using the age tool, per the SKILL.md. Treat that file the way you'd treat any file full of someone's personal details.
Consent is required, not optional
The engine refuses to plan or act on a subject's data without recorded consent, per the SKILL.md, and the README is explicit that it's meant only for people who have authorized their own, or an authorized family member's or client's, removal.
Some brokers still need a person
Government ID checks, phone callbacks, faxes, mailed requests, and hard CAPTCHAs the browser can't clear all get collected into a single end-of-run digest for you to finish by hand, per the README and SKILL.md. One broker family, PeopleConnect, is called out separately because deleting your data there can wipe an existing suppression and cause you to reappear.
Limits worth knowing
What removal does and doesn't do, with or without an agent
Whether you use DROP, write to a broker yourself, or run UNBROKER, the same limits apply. None of these routes touch public records: voter rolls, property records, and court filings stay public regardless of a deletion request, per UNBROKER's own README. None of them remove information from an account you still control yourself, such as a social media profile you set up and still use.
Brokers can also re-list you. People move, get new phone numbers, and show up in new public records that feed broker databases again, so a removal today isn't a permanent guarantee. DROP's own timeline notes that registered brokers must re-check and reprocess deletion lists at least every 45 days, which is the state's way of building ongoing removal into the system rather than treating it as a one-time event; UNBROKER's README describes scheduling its own re-scans for the same reason.
Being hidden from a broker's free public search tier also isn't the same as full deletion. Both the DROP program and UNBROKER's documentation note that a listing taken off a free search can still exist in a broker's paid-tier records. And removing your data can have a side effect you may not want: fewer targeted ads and less personalized content, since that personalization often runs on the same data you're asking brokers to delete.
No tool required
Doing it yourself without any software
You don't need DROP or UNBROKER to get started. If you're a California resident, DROP at privacy.ca.gov/DROP is still the fastest manual option: it's free, takes a few minutes, and covers hundreds of brokers in one request, so it's worth doing even before you consider any other route.
Outside California, or for brokers DROP doesn't reach, the do-it-yourself version is the same request repeated by hand. Find the broker's privacy policy or contact page, identify which law gives you a right to delete (CCPA/CPRA, GDPR, UK GDPR, or another state's privacy statute), and send a request naming that law, the personal information you want removed, and enough identifying detail (name, past addresses, email, phone number) for the broker to find your record. Keep a copy of what you sent and when, since some laws set a response deadline the broker is expected to meet.
If a broker has no form and no clear privacy contact, a plain email asking it to delete your information and stop selling it is still worth sending, even with no specific law to cite; many brokers will act on a reasonable request regardless. For a longer list of brokers to check one by one, California's public registry at cppa.ca.gov/data_broker_registry is a reasonable starting point even if you aren't a California resident, since many brokers that register there also operate nationally or globally.
If doing this by hand for dozens of brokers sounds tedious and you'd rather not set up an agent either, paid removal services also exist that will do the searching and filing for a fee. This guide doesn't recommend a specific one; it's simply worth knowing that paying someone else to do this work is a third option alongside DROP, doing it yourself, and running an agent like UNBROKER.
Who made what
Independent guide, no affiliation
This page is published by Nightschool AI, an independent learning site. It is not affiliated with, endorsed by, or partnered with Nous Research or the California Privacy Protection Agency. Hermes Agent and the UNBROKER skill are Nous Research's own open-source project; DROP is a program run by the California Privacy Protection Agency. Nightschool AI describes both based on their own published documentation and has not run UNBROKER itself, so nothing here is a first-hand report of the tool working as described, only a summary of what its maintainers state.
This page is general information, not legal advice. Privacy laws, the DROP program's rules and timeline, and UNBROKER's own features can all change after this page is written; check each program's own current documentation before you rely on a specific detail here, especially a date, a fee, or a step-by-step instruction.
Learn to work with AI agents, not just read about them
Understanding what an agent like Hermes can and can't do on its own is a skill, and the free Nightschool AI curriculum builds it from the first lesson.
Frequently Asked Questions
Is there a free way to remove my information from data brokers?
Yes. California residents can use the state's free DROP platform at privacy.ca.gov/DROP, which the agency states will never charge a fee, to send one request covering every broker registered in California. Anyone, anywhere, can also contact brokers directly and ask for deletion at no cost, under whichever privacy law applies to them.
What is DROP and who can use it?
DROP, the Delete Request and Opt-out Platform, is a free tool from the California Privacy Protection Agency that lets a California resident submit one request reaching every registered data broker, over 600 of them. It launched January 1, 2026, and is only available to California residents, verified through the state's California Identity Gateway or Login.gov.
How long does DROP take to work?
Data brokers must begin accessing DROP and processing deletion requests by August 1, 2026, at least once every 45 days after that. Per privacy.ca.gov/DROP, it can take up to 90 days before a status update appears for a given broker, and timing varies broker by broker.
I don't live in California. Can I still remove my data from brokers?
Yes, but not through DROP, which is limited to California residents and California-registered brokers. You can send a deletion request directly to a broker under the GDPR or UK GDPR if you're in the EU or UK, under another state's privacy law if one applies, or as a general request with no specific law cited.
What is UNBROKER?
UNBROKER is an open-source skill for Nous Research's Hermes Agent that searches data broker and people-search sites for a consenting person's exposed information and submits removal requests on their behalf, including California's DROP one-shot request. Nightschool AI has not run it and describes it only from its published README, SKILL.md, and user guide.
Is UNBROKER safe to use?
Its own documentation discloses real things to weigh: it can drive a browser and send email on your behalf, defaults to acting without per-step confirmation unless switched to an assisted mode, and stores a plaintext dossier on your machine unless you enable its optional encryption. Reading its SKILL.md before running it is worth the time.
Can an agent like UNBROKER clear every CAPTCHA automatically?
No. Per its README, a recommended cloud browser service helps clear soft CAPTCHAs as part of normal use, but UNBROKER does not defeat hard CAPTCHAs or other interactive challenges. Those, along with government ID checks, phone callbacks, faxes, and mailed requests, are collected into a digest for a human to finish.
Does removing my data from brokers delete it permanently?
Not guaranteed. Brokers can re-list people as new public records and data feeds come in, which is why DROP requires brokers to reprocess deletion lists at least every 45 days and UNBROKER's README describes scheduling its own re-scans. Removal reduces exposure; it isn't a one-time, permanent guarantee.
Does deleting my data from brokers remove public records too?
No. Public records such as voter rolls, property records, and court filings stay public regardless of a broker deletion request, per UNBROKER's own documentation. Deletion requests only affect the personal information a broker itself collected and holds, not government-maintained public records.
Are there paid services that remove my data from brokers?
Yes, paid removal services exist as an alternative to DROP, doing it yourself, or running an open-source agent like UNBROKER. This guide doesn't name or price any specific service; it's simply one more option if you'd rather pay someone else to handle the searching and filing.
Keep going
Related Guides and Courses
Understand the agent before you trust it
Reading what a tool's own documentation admits is the first skill, before you ever hand it a task.