For individuals and households
What does the internet already know about you?
You've had email for twenty years, accounts on sites that no longer exist, and a phone number that's been in more forms than you can remember. A Digital Footprint Review finds what's actually out there, tells you which parts matter, and gives you a short list of things to do about it.
People usually come to me when…
They're job hunting
A hiring manager is going to search your name. You'd like to know what they'll find before they find it.
Something felt off
A login alert, a strange text, a charge you didn't make. You want to know whether it's a one-off or a symptom.
They're newly visible
A promotion, a new public role, a business of your own — and suddenly being easy to find is a liability rather than a convenience.
They have kids online
You want to understand the family's shared exposure before you start setting rules for someone else's phone.
They read one too many articles
You've been meaning to "do something about privacy" for two years and would like someone to just tell you where to start.
They tried the free tools
You ran a free scan, got a score and a sales pitch, and still have no idea what to actually do.
What I look at
All of it using open-source research — the same publicly available information anyone could find, gathered systematically by someone who does this professionally.
Breach and credential exposure
Which known data breaches include your email addresses, what was exposed in each, and — importantly — whether any of your accounts show up in infostealer malware data, which indicates a device compromise rather than just an old leak.
Data broker and people-search listings
The sites that quietly publish your address, phone number, relatives, and former addresses. I identify which ones have you listed and give you the removal process for each.
Search and public records
What comes up when someone searches your name properly — including the results that don't appear on the first page, old profiles you've forgotten, and documents you didn't know were public.
Social media and account exposure
What your public profiles reveal, which accounts are more open than you think, and where the same username ties separate parts of your life together.
Photo and metadata leakage
Whether images you've posted publicly carry location data or reveal more of your home, workplace, or routine than you intended.
Reuse and linkage risk
The connections that matter most: where one exposed detail unlocks another. A leaked password plus a reused username plus a public security-question answer is a different problem than any of the three alone.
And then the part that actually helps
Findings on their own are just anxiety with footnotes. The report ends with a ranked action list — usually five to eight items — written as specific steps, with the handful that genuinely matter marked as "do these first." If a step needs a vendor or a form, I name it.
What I need from you
The intake form takes about fifteen minutes. The more complete it is, the more I find — most gaps in a review come from a forgotten old email address.
Names you've used
Your legal name, plus maiden or former names, middle names, nicknames, and any spelling variations. Old records don't update themselves.
Email addresses
Every one you can remember, including defunct ones. The dead Hotmail account from 2009 is often where the interesting findings are.
Usernames and handles
Across social media, forums, gaming, anywhere. Reused handles are the single most common way separate identities get linked.
Phone numbers
Current and previous, mobile and landline. Numbers persist in data broker records long after you give them up.
Places you've lived
Current and previous cities. Needed both to find records and to tell you apart from other people with your name.
What prompted this
Optional, but it shapes everything. A review for someone job hunting looks different from one for someone who's worried about a specific person.
What I will never ask for
Passwords. Account access. Your Social Security number. Financial account numbers. Any kind of remote access to your devices. If anyone claiming to be me ever asks for these, it isn't me.
One firm rule: it has to be you
I only research people who have asked me to research them. Before any work begins, you'll sign a short attestation confirming you are the person being reviewed, and I verify that the name on the intake form matches your government-issued ID.
This isn't bureaucracy for its own sake. The same research that helps you understand your own exposure would help someone else find a person who doesn't want to be found. I'm not willing to be part of that, so I don't take third-party requests — not for a partner, not for an employee, not for a family member, not for any reason, and no exceptions for people who seem nice.
If someone is actually looking for you
If you're dealing with a stalker, an abusive ex, or anyone actively trying to locate you, a footprint review can be genuinely useful — but it shouldn't be your only step, and it shouldn't be your first. Tell me when you get in touch. I'll point you toward advocacy organizations and state address-confidentiality programs that are built for this, and we can decide together whether a review fits into that picture.
Pricing
Flat fee, agreed up front, paid before work starts.
Individual
One person
$249 one-time
- Full research across every area above
- Written report with ranked findings
- Specific removal and lockdown steps
- 45-minute walkthrough call
- Report delivered within 7 business days
Household
Up to 3 adults at one address
$449 one-time
- Everything in the individual review, for each adult
- One combined report, plus per-person sections
- Shared accounts, shared devices, and family linkage
- 60-minute walkthrough call
- Report delivered within 10 business days
How the household tier works
Each adult signs their own attestation and verifies their own ID — one person can't sign up a spouse or a roommate, even with the best intentions. That's the same consent rule as above, applied per person.
Children are handled differently. I don't research anyone under 18 as a subject — no searches on their name, their accounts, or their handles. Instead, if you have kids at home, the walkthrough call covers family exposure with you as their parent: what your own findings reveal about them indirectly, how shared devices and logins create risk across the household, what to look at in their school and gaming accounts, and what's worth setting up before they're old enough to resent it. Guidance for you, not a file on them.
Questions people ask
Is this going to be depressing?
A little, in the middle. Most people find more out there than they expected, and there's usually a moment of "how is that public?"
But the report is built to end somewhere useful. Almost everything I find has a concrete fix, and the fixes are mostly boring and quick — a removal form, a settings change, a password you should have retired in 2015. People generally finish the walkthrough call feeling better than they started it.
Can't I just do this myself?
Honestly, a fair amount of it, yes — and I'll tell you that for free. Check your email addresses on a breach notification service, search your own name in a private window, and review your social media privacy settings, and you'll have covered real ground.
What you're paying for is thoroughness and judgment: knowing which fifty sources to check rather than the obvious three, recognizing when two unrelated findings combine into a real problem, and getting a ranked list instead of a pile. If budget is tight, start with the free newsletter and do it yourself.
Will you remove my information for me?
No. I diagnose; I don't remediate. The report tells you exactly which sites have your data and how to submit a removal request to each, but you submit them.
That's partly a boundary that keeps me objective, and partly practical — most removal processes require identity verification from the person themselves, so you'd have to be involved regardless. If you'd rather pay a service to handle it on an ongoing basis, I'll name a few in the report without taking a cent from any of them.
What happens to the information you collect about me?
Research notes and intake data live in an access-controlled location only I can reach, and are deleted 30 days after your walkthrough call. After that I retain only the signed agreement, which I'm required to keep.
Your report is yours. I don't keep a copy as a sample, I don't use your findings as a case study, and I don't share anything with anyone — and if you want everything deleted earlier, just ask.
Do you really not need my passwords?
Correct, and it's worth saying twice. Everything in a footprint review comes from publicly available sources plus what you tell me. There's no point in the process where account access would help, so there's no point where I'd ask.
When a finding involves a breached password, what I can see is that a password associated with your address was exposed in a particular breach — which is the useful part. I don't need the password itself, and I don't want it.
What if you don't find anything?
Then the report says so, and that's a legitimate outcome you've paid to establish. "I checked these forty sources and you're clean on thirty-eight of them" has real value, particularly if you've been anxious about it.
In practice, nobody who has been online for more than a few years comes back empty. But the volume varies enormously, and some people really are in better shape than they feared.
How long does it take?
About two weeks from the signed agreement to the walkthrough call. The report itself lands within 7 business days of your completed intake form, and we usually schedule the call within a few days after that.
Ready to find out?
Or still deciding — either is fine. Get in touch and I'll tell you whether this is worth your money.