Removal guide · Check Secrets
CheckSecrets has no working web-form opt-out. There is a "Do Not Sell Or Share My Personal Info" form, and it hides its submit button behind a scribble CAPTCHA with no readable letters in it, the same gate sister site BackgroundCheckers.net puts up. The broken flow is documented below so you can capture it, and then comes the written route. If you live in California there is a better first move. Registered brokers have had to process deletion requests routed through the California DROP platform since 1 August 2026, and Truth Now LLC is registered, so one request there reaches it whatever its own form is doing. Treat the email as the fallback, since nobody has recorded one being answered.
Worth reading first. The Check Secrets profile sets out Truth Now LLC, the registration behind the brand, and where it sat in the 2024 leak.
Quick facts
Broken
California DROP request, or a CCPA written request
Medium
~10 minutes
Truth Now LLC (CA)
#542880 · 2021-07-14
45 days for California residents, extendable to 90
Medium · Re-check quarterly
Why this matters more than a normal opt-out. Truth Now LLC is a California-registered data broker (CA AG registration #542880, approved 2021-07-14). California residents get a deadline out of that. The CCPA gives the company 45 calendar days to answer a verifiable request to delete, whether or not its web form works, and it can take a further 45 days if it tells you it is doing so, which makes 90 at the outside. Those deadlines are a California right and do not reach a reader elsewhere, though the request is still the thing to send, because a form nobody can submit is a documented dark pattern rather than a reason the obligation goes away.
The broken flow
Work through these three screens once, purely to collect evidence. Save the CAPTCHA screenshot - you'll attach it to the written request in the next section, which is what remains once the form has refused you, alongside the DROP route for California residents.
Go to checksecrets.com and scroll to the footer. Click the link labeled "Do Not Sell Or Share My Personal Info" in the footer navigation column.
The form is titled "Remove My Information" with the instruction "Enter the name and state in the form below to locate the record you would like to remove." A small "START HERE - Enter the information about the person you want to remove" notice sits above the fields.
The instruction text says only "name and state," while the form itself reaches for a full identity profile. Give it the four it needs to run a search and leave the rest empty:
The zip, phone and email boxes below are marked optional and should stay that way. This submission is never going to complete, so filling them in hands a company with a 106-million-record breach behind it three more pieces of you for nothing. Click SEARCH.
Clicking SEARCH triggers a CAPTCHA gate. There are two CAPTCHAs in a row.
This is the same broken-CAPTCHA dark pattern used by sister site BackgroundCheckers.net (also on the MC2 Data backend). It's not a temporary bug - it's documented operator behavior across multiple brands in the cluster.
Escalation path
Truth Now LLC is registered with the CPPA as a data broker (registration #542880). That registration commits them to comply with CCPA deletion and opt-out requests through multiple channels - including email and postal mail - regardless of whether the web form works. For a California resident, filing in writing starts a 45-day clock, which the company can extend once to 90 by telling you it is doing so. Everyone else is asking rather than invoking a deadline, and it is still worth asking.
Send an email to support@checksecrets.com (the address Truth Now LLC lists with the CPPA for CCPA requests). Use this template:
To: support@checksecrets.com
Subject: Deletion Request - [Your Full Legal Name]
Truth Now LLC (operator of CheckSecrets.com),
I am requesting that you DELETE all personal information you have
collected or maintained about me, that you direct your service
providers to do the same, and that you stop selling or sharing my
personal information.
If I am a California resident, this is a request to delete under the
California Consumer Privacy Act (Cal. Civ. Code § 1798.105) and to
opt out of sale or sharing under Cal. Civ. Code § 1798.120. If I am
not, please treat it as a voluntary request.
Identifying information for the record I am asking you to delete:
- Full legal name: [first] [last]
- State shown on the listing: [state]
- Link to the listing, if you were able to reach it: [URL]
I am providing the minimum needed to locate a record you already hold.
If you need more to complete the match, tell me which fields and why,
and I will supply them for that purpose alone.
I have attempted to use the web opt-out reached from the Do Not Sell
Or Share My Personal Info link in your site footer. The form is gated
behind a CAPTCHA whose image contains no readable letters, which makes
submission impossible. I have attached a screenshot of that CAPTCHA
for your records.
If I am a California resident, I expect a response within 45 calendar days, or notice of an extension, as provided by Cal. Civ.
Code § 1798.130(a)(2). Please confirm receipt of this request and
provide the request reference number.
Sincerely,
[Your full legal name]
Attach the timestamped screenshot of the unsolvable CAPTCHA from step 3. Send from an email address you own and can reliably check; their response will come there.
Tracking the clock, if you're in California. The CCPA window runs from the day the company receives your request. For email that's normally the day you send it, so keep the sent copy; for a posted letter, count from delivery. If nothing has arrived by day 45, follow up quoting the date you sent it. Be ready for them to claim the extension, which is lawful once they tell you they're taking it and moves the deadline to day 90. Readers outside California have no such clock to cite, so a follow-up there rests on the request itself.
Stay off
CheckSecrets pulls from public records continuously, so even a successful CCPA deletion doesn't permanently remove you. A few habits cut the re-listing rate.
We recommend re-checking CheckSecrets quarterly using a name + state search (you don't have to complete the CAPTCHA - you can stop at the result page if it shows one before the CAPTCHA modal). Re-file the CCPA deletion request if anything has reappeared.
Opt out of the sister brands too. CheckSecrets is one of 15 brands in the MC2 Data cluster; we've seen some pick up your record even after Truth Now LLC drops it. Many of the sister brands have the same broken CAPTCHA - escalation will be needed for them too.
Suppress the upstream sources where possible. Whitepages, BeenVerified, Spokeo, and similar feed the same upstream public-records aggregators. In our experience, removing your record from a few of the larger brokers reduces the surface area Truth Now LLC's scraper can rediscover.
I'd suggest a forwarding mailbox or PO Box for non-essential mail. The single biggest re-listing trigger we see is a new property/voter record being associated with your full residential address. Reducing the number of public sources that tie your name to a street address slows down re-listing.
Why this matters. CheckSecrets is one of 15 brands on an MC2 Data backend that already had a 106 million record breach in 2024. The fewer public sources feeding those scrapers, the less of your record is sitting there to be exposed when the next one happens.
Redact scans 120+ data broker sites from your device, finds where your details are listed, and submits the removal requests for you. If a broker relists you, it files again.
August 2026 · Steps confirmed by a real run of the form rather than from reading the site, evidenced by the step captures on this page. The platform's sister sites were walked between 7 and 11 August; this one was not dated more precisely at the time. Supporting research dated August 5, 2026, including the CAPTCHA gate that stops the form. The written escalation route is read from Truth Now LLC's California registration rather than from a request anyone has seen answered.