Privacy Policy

1. Who This Covers

This policy describes how Unsubscribetool (available at unsubscribetool.com) handles information when you browse our cancellation guides, use our public API, or buy a Cancellation Pack. It applies to this website only.

Data controller. The data controller for this service is Liu Xudong ("we"), with operational address at 548 Market St, PMB 72296, San Francisco, CA 94104, United States. You can reach our privacy team at privacy@unsubscribetool.com.

2. What We Collect

We collect very little, and nothing that identifies you personally:

1. Public site.Our hosting provider Cloudflare processes requests at the edge to serve the site and keep it secure. We do not enable long-term retention of site request logs; those records are not stored.
2. Public API.Our public API runs as a Cloudflare Worker. For diagnostic purposes, recent invocation logs are retained in the Cloudflare Workers dashboard for about 7 days, then automatically deleted.
3. Anonymous usage analytics.This site measures anonymous, aggregate usage with Cloudflare Web Analytics and Google Analytics 4. Google Analytics 4 writes an analytics cookie only after you consent (see Cookies below); if you decline, it writes nothing. Analytics can be blocked via your browser or extensions; the site works fine without it.
4. Aggregate API counts.Our public API records usage statistics in aggregated form only: request counts plus a coarse user-agent classification (for example, "browser" vs. "bot"). We store no IP addresses and no raw user-agent strings.
5. Abuse-protection hashes.To prevent abuse without keeping identifying records, audit logs store only one-way SHA-256 hashes. These cannot be reversed into the original values.
6. Your local saved list.If you save services to revisit later, that list is stored in your browser’s localStorage on your own device. It never leaves your device and we cannot read it.

3. What We Do NOT Collect

To be plain about it, we do not collect or store:

• Your name, email address, or postal address;
• Your payment credentials — payments are processed entirely by Lemon Squeezy as Merchant of Record under its own privacy policy; we never see your card details;
• The contents of your email. We have no access to your Gmail, Outlook, or any other mailbox, ever.

Legal Basis

We process information on the following legal bases (GDPR Art. 6):

• Consent (Art. 6(1)(a)).Analytics cookies and Google Analytics 4 run only after you choose Accept in the consent banner. You may withdraw consent at any time; withdrawal does not affect processing already carried out on the basis of consent.
• Legitimate interests (Art. 6(1)(f)).Short-lived server logs, abuse-protection hashes and aggregate API counts. We have balanced this: the processing serves security, availability and abuse prevention, sits within your reasonable expectations, and is minimised (no plaintext IP stored, one-way hashes only, aggregate counts only), so it does not override your rights and freedoms.

Cloudflare Web Analytics sets no cookies and produces only aggregate, de-identified statistics. To the extent individuals cannot be identified, the GDPR does not apply; we list it here anyway for openness.

International Data Transfers

Our analytics provider, Google LLC (Google Analytics 4), is based in the United States. Once you consent to analytics, limited data is therefore transferred there.

That transfer is safeguarded: Google LLC is certified under the EU-US Data Privacy Framework. Should that framework be invalidated or withdrawn, we fall back on the EU Standard Contractual Clauses (SCCs), together with these supplementary measures: we collect no name, email or other identity information; Google Analytics 4 does not log or expose your IP address; and Google Signals and ad personalization are switched off.

For more detail on the transfer mechanism, write to privacy@unsubscribetool.com.

Cookies

This site sets no cookies until you agree.

If you choose Accept in the consent banner, Google Analytics 4 sets analytics cookies that tell returning visits apart from first ones. They are analytics-only: no advertising, no cross-site tracking, and both Google Signals and ad personalization are switched off. GA4 does not log or expose your IP address, so no personally identifying information is collected — consistent with our no-accounts, no-email policy.

• _ga — distinguishes visitors, retained 2 years;
• _ga_* — maintains session state, retained 2 years.

Cloudflare Web Analytics runs at the edge and sets no cookies whether you accept or decline. Your consent choice — like your saved list — is kept in your own browser’s localStorage. It is never sent to us and involves no cookie.

You can withdraw consent at any time, as easily as you gave it: open “Cookie settings” in the footer to reopen the banner and choose Decline — analytics stops immediately and any analytics cookie already written is cleared. You can also clear this site’s data in your browser, or block analytics scripts outright.

Data Sharing

We do not sell your data. We do not share your data for marketing. The only third parties involved are the processors named above, each handling a narrow function:

• Cloudflare — website hosting and security logging;
• Cloudflare Web Analytics — anonymous usage measurement;
• Google Analytics 4 — anonymous usage measurement after you consent (analytics only, not used for advertising);
• Lemon Squeezy — payment processing and Merchant of Record duties for Cancellation Pack purchases.

Apart from these, we disclose data only when legally required (for example, a valid legal order served on us or our providers).

Your Rights (GDPR, CCPA, and Similar Laws)

Because there are no user accounts and we collect no identity information, we typically hold no data that can be linked back to you. That means we usually cannot — and do not need to — act on deletion, access, or portability requests: there is no record tied to you to delete or export.

If you believe some data we hold relates to you specifically, write to us and we will look into it in good faith.

Children’s Privacy

The service is a general-audience website and is not directed at children under 13 (or under 16 in parts of the EEA/UK). Since we collect no personal information from anyone, including children, no child’s personal data is knowingly collected. If you believe otherwise, contact us and we will address it promptly.

Changes to This Policy

If this policy changes, the updated version will be posted on this page with a revised version number and effective date. Material changes will be summarized at the top of the page.

Contact

Privacy questions or requests:privacy@unsubscribetool.com.