Delete your data

Start here

Tombstone is a tool for deleting data, so it would be absurd to make deleting your own data hard. There is a one-click path inside the app, it takes effect immediately, and there is no waiting period and nobody to talk to first.

Worth knowing before you start: your emails were never stored. Tombstone reads message headers, works out who sent each message, and discards the header. What exists to delete is the summary we built for you.

Option 1: delete your account and everything in it

This is the complete erasure.

1. Sign in and go to Account.
2. Scroll to Danger zone.
3. Choose Delete account and confirm.

The moment you confirm, all of this happens:

• Your Google token is revoked with Google, so our access ends at the source rather than merely being forgotten on our side.
• Your user record is deleted, and the delete cascades to every row attached to it: your discovered accounts, scan history, queued and completed jobs, and any deletion drafts.
• Any anonymous breach-check row for your email address, from a check you ran before signing up, is erased too.
• Your session is cleared and you are signed out.

This is immediate and irreversible. There is no soft delete, no thirty-day grace period, and no archived copy to restore from.

Option 2: disconnect but keep your account

Logging out does more than end your session: it revokes Tombstone's access token with Google. We can no longer read anything from your mailbox until you choose to reconnect. The account list we already built for you stays, so you can pick up where you left off. If you want that list gone as well, use option 1.

Option 3: revoke from Google's side

You can cut off access without visiting Tombstone at all. Go to Google Account › Third-party apps & services, choose Tombstone, and remove access. Our token stops working immediately.

Note that this stops future access but does not delete the summary already stored in our database. To remove that too, use option 1, or email us as described below.

Never checked in with an account?

If you only used the free breach checker on the home page, we hold one row: the email address you typed and the timestamp, kept so we can measure how many people use the checker. Email support@tombstonepro.com from that address and we will erase it.

Deletion by request

If you cannot sign in, or you would rather someone did it for you, write to support@tombstonepro.com from the address on the account. We will confirm it is you, delete the data, and confirm in writing within 30 days, usually far sooner.

What survives deletion

Being straight with you: server logs may retain a request trace, such as an IP address and a URL, for a short operational window before rotating out. Those logs contain no mailbox data and no account list. Nothing else is kept.