Privacy policy

This policy covers two separate groups, because their situations are not the same:

• Customers — people who use nationalpublicrecords.us. You gave us your information directly.
• Search subjects — people who appear in search results. That information reaches us from third-party data suppliers, without any involvement from the person concerned.

If you are here because your own details appear in our results, the section on removal below is the one you want, and Remove my info is the form.

• Your email address, to create your account, send sign-in links, receipts and renewal notices.
• Your password, stored only as a one-way hash. We never hold the password itself and cannot recover it or tell you what it is. If our database were ever exposed, the hash could not be used to sign in elsewhere — but the account it belongs to would reveal the searches on it, which is why you can use an emailed sign-in link instead and never set a password at all.
• Your searches and reports — the names and states you searched, and the reports you unlocked. This is what your dashboard shows you, and what lets us answer a billing question about your allowance.
• A hashed form of your IP address, for rate limiting and abuse prevention. We do not store the address itself.

We never see or store your card details. Payment is handled entirely by our payment processor, who holds the card and returns only an identifier and the outcome.

We do not gather records ourselves. Records are licensed from commercial data aggregators, which in turn assemble them from public sources including court filings, county assessor and deed records, and public registries.

We do not verify what those sources contain. A record may be incomplete, out of date, or attached to a different person with a similar name.

Anyone may have their information removed from our search results at no cost. We never charge to remove a record, and we never charge to keep one suppressed. There is no upsell attached to this and there never will be.

A suppression applies to both preview searches and full reports, and it is enforced in the layer that talks to our data suppliers rather than in the interface — so it cannot be bypassed by any part of the site. Requests are processed within the window required by applicable law.

Removing your record here does not remove it from the original public source, or from other services that license the same data. We can only control our own results.

Request removal

• Preview searches are cached for 24 hours and then expire.
• Reports are retained for 90 days from the date you unlocked them, then the record contents are purged. The fact that a report was run stays on your account, because it is part of your billing history.
• Account and billing records are kept while your account exists and afterwards for as long as tax and accounting obligations require.
• Suppression records are kept permanently. They have to be — forgetting a removal request would let the record reappear the next time a supplier refreshes its data.

We do not sell customer data. We share only what is necessary with the service providers that run this business: our data suppliers (the name and state being searched), our payment processor, our email provider, and our hosting and database providers.

We may disclose information where required by law, or to establish or defend a legal claim.

We use PostHog to measure how the site is used — which pages people reach, which step of the search they stop at, and whether a purchase completed. It is how we find out that something is broken.

The name of a person you search for is never sent to our analytics provider. Nor is the city, the middle initial, any record we found, any report, or your email address. What is sent is the shape of the activity: the state searched, whether a middle initial or city was supplied, how many results came back as a broad band rather than an exact number, which plan was chosen, and which step was reached.

We have also switched off the features that would collect data automatically. There is no automatic click capture, which would otherwise record the text of whatever you clicked — including a name on a results page. Events are limited to a fixed list written into the code.

We do record how the pages are used, and every word on the screen is hidden before it leaves your browser. This is a session recording, and what it captures is the shape of the visit: the page layout, where the cursor moves, what is clicked, how far it is scrolled, and where somebody stops. Every text field and every piece of text on the page — including any name you type, any name in a set of results, and everything in a report — is replaced with blanks before the recording is sent, so the playback is a wireframe rather than a picture of your screen. Card details are entered inside our payment provider’s own frame, which this recording cannot see into at all. Network traffic, browser console output and page addresses beyond the path are all excluded.

Analytics uses a first-party cookie to recognise a returning browser. If you sign in, activity is associated with your account identifier — never your email address. Browser “do not track” and ad-blocking extensions that block analytics will stop this collection, and nothing on the site depends on it.

We advertise this service, and we use Google’s conversion tag to find out which adverts lead to a subscription. It records that a purchase happened, its value, and a reference number for the subscription.

We do not send Google your email address, and we do not upload a hashed version of it either. Google offers a feature that improves advert matching if a merchant uploads hashed customer emails. We have deliberately not enabled it: better attribution is not worth handing an advertising platform a list it can match against profiles it already holds. The name of anyone you search for is never sent to Google, and page addresses are trimmed of anything after the question mark before they are reported.

Google sets its own cookies for this. Ad and tracker blockers stop it, as do the advert-personalisation controls in your Google account, and nothing on this site depends on it working.

You may request a copy of the personal information we hold about you, ask us to correct it, or ask us to delete it. Email support@nationalpublicrecords.us. Deleting your account does not remove records about you from search results — that is the removal request above, and it is a separate thing.

Depending on where you live you may have additional rights under laws such as the California Consumer Privacy Act. We honour those requests regardless of residency.

Traffic is encrypted in transit. Access to customer data is limited to what the service needs to operate. No system is perfectly secure, and we do not claim otherwise.

National Public Records is operated from Australia and uses service providers in Australia and the United States, so your information may be processed in either.

This service is not for anyone under 18 and we do not knowingly collect information from children.