Legal · draft for review

Privacy notice

Last updated 11 October 2026. Working draft.

Who we are

Takedown Pack is operated from the United Kingdom. Contact: [email protected].

What we collect and why

Free check. The site address you paste, your own site address if given, your email if given, the results of our public lookups, a hashed form of your network address for rate limiting, your browser type, the referring page and any advertising parameters. Used to show you the result, to open a case if you sign up, and, where you gave an email, to follow up about the service.
Account. Your email, name, sign-in sessions and your role in your organisation. Used to run the service.
Brand settings. The name, title, email, phone and postal address of the person who signs reports. These appear in the reports you approve, which is their purpose.
Evidence. Copies of pages we capture from suspected copy sites, lookup results about those domains, and the reports you approve and send. Kept for the life of the case and your account.
Beacon. If you install our snippet on your own site, we receive the page path, referrer, browser type and country of visitors who land on a copy of your site. We never store visitor IP addresses.
Billing. Payments are handled by our payment provider, Lemon Squeezy. We store its customer and order identifiers and what was bought, not card details.

Who we share it with

Reports you approve are sent to the recipients shown on the report (registrar and hosting abuse desks, Cloudflare, Google, Microsoft, Netcraft, APWG and others). Our processors: Lemon Squeezy (payments), Mailjet (email), our hosting provider, and Anthropic (the model that drafts the narrative parts of reports from the evidence; it does not receive your account data).

Retention

Triage leads without an account: 12 months. Account data and case evidence: for as long as the account exists, then 90 days.

Your rights