Mutiny Labs

Reduce everyday tracking · Part 1 of 3 · 3 min read

Reduce the data people can collect about you.

A practical privacy checklist and a breach check, with clear limits on what either can tell you.

In this series · 3 parts
  1. 1. Reduce the data people can collect about you.
  2. 2. How data brokers build a picture of you.
  3. 3. Microphones, monitoring, and someone you know.

Make one useful change, then repeat it.

  1. Review location access. Keep precise or background location only where a feature you use needs it. Check permissions again after adding apps.
  2. Reduce advertising identifiers and permissions. Review the controls offered by your device and services. These can reduce some tracking; they do not make browsing anonymous.
  3. Remove one people-search listing. Use the site's documented opt-out process. Keep a dated record and check again later, since information can return.
  4. Review public accounts. Remove unnecessary addresses, birthdays, schedules, and workplace or school details.
  5. Secure recovery routes. Protect the email account and phone account used to reset other services. A breach check below can identify some known exposure, not prove safety.

Should you pay for removal?

A service may save time across multiple sites. Check its coverage, recurring cost, what personal information it requires, and how it demonstrates completed removals. Neither a paid service nor a manual opt-out removes every copy of your data.

Start manually if you want to understand the process. Pay for convenience only after deciding which sites matter and how you will verify the result. This guide does not establish that one provider or approach performs best for everyone.

Your email address is the primary key.

↳ here is where it already leaked from

Data from different sources can be linked when records share an identifier, such as an email address. A breach result can show known exposure associated with an address. It does not establish who currently holds a profile about you.

Which makes the breach index an unusually honest mirror. It does not show you your broker file, because nobody will show you that. It shows you the raw material: which companies lost your address, and what they lost alongside it.

Read the results as inputs, not as an incident.

The results explain what each known incident exposed. Treat that as a reason to review affected accounts, reused credentials, and impersonation risk. It is not proof that a particular data broker has your information.

Breach lookup

Check an address

The one you have used longest is the one worth checking. Ten years of an address is ten years of joins.

Privacy: the address is checked against Have I Been Pwned through our own server. We do not save it in application storage or analytics, and we do not add it to any list. Being straight with you about the limit: it does travel through our server to HIBP, and transient operational logs may exist somewhere in that delivery chain, which is not something we can promise away. If you would rather avoid that entirely, look the address up on their own site instead. Full detail in our privacy policy.

Breach data powered by Have I Been Pwned.

Edited September 29, 2026. Research and source dates are retained; this edit is not a fresh review of every statistic or legal development.