Legal · Privacy
Submit a Privacy Request
A verified, tracked workflow for exercising your rights under the CCPA/CPRA, the GDPR and UK GDPR, and U.S. state privacy laws. Every request follows the same five stages and the same response deadlines, wherever you live.
Effective & last updated: August 1, 2026
This is the designated intake method for all privacy rights requests described in our Privacy Policy. Requests are free. You will not be denied service, charged a different price, or given lower-quality content for making one.
The workflow
- 01
Received
Same business dayYour request arrives in the single monitored inbox. It is logged with a timestamp and a request reference. No third party receives it.
- 02
Verified
Within 10 business daysWe confirm you control the email address used and, where the request is sensitive (deletion or a copy of records), ask one or two additional questions matching information already in our records. We never ask for a government ID, Social Security number, or payment details.
- 03
Reviewed
Days 10–30We search every system that could hold information tied to you: the inquiry inbox, correction submissions, and aggregate server logs. Records that are aggregate or de-identified and cannot reasonably be linked to you are out of scope and we say so.
- 04
Answered
Within 45 daysWe respond in writing with the outcome, the categories of information involved, and the legal basis for any partial or full denial. If the request is complex we may extend once by up to 45 days (GDPR: 60 days) and will tell you before the original deadline.
- 05
Appeal
45 days from denialAny denial can be appealed by replying to our response with the word APPEAL. Appeals are reviewed independently of the original decision. If the appeal is denied you may contact your state attorney general or, in the EU/UK, your supervisory authority.
Start a request
Scope, limits, and denials
- What we can act on. Only information reasonably linked to you — chiefly the content of messages you sent us and any correspondence that followed.
- What we cannot act on. Aggregate or de-identified analytics, security and abuse-prevention logs we are required to keep, and information a law obliges us to retain. We will identify any withheld category and the exemption relied on.
- Repetitive or manifestly unfounded requests. We may decline or charge a reasonable fee where the law permits, and will explain why in writing.
- Opt-outs. We do not sell or share personal information, so an opt-out is honored immediately and confirmed. We also honor Global Privacy Control signals automatically.
Other channels
Cookie and storage preferences can be changed at any time from the "Cookie preferences" control in the footer without submitting a request — see the Cookie Policy. Factual corrections to published editorial content are handled by the correction form on each page rather than through this workflow, because they are not personal information requests.