Find forgotten accounts.
Delete what you don't need.
Start with a free breach check: no sign-up needed. Then connect Gmail securely to uncover old accounts still holding your data, and see what you can delete next.
We only scan account-related email metadata, never your personal conversations.
“Can you read my emails?” No, Google won't let us.
We ask Google only for the metadata permission, which exposes the sender, subject, and date. Google itself blocks that permission from returning the body of a message or any attachment, so reading your emails isn't something we can do.
You don't have a password problem.
You
have a forgotten-account problem.
Every old subscription, one-off checkout, and "I'll try this for a week" sits in a database somewhere with your name on it. Unsubscribe doesn't delete it. Logging out doesn't delete it. Only you can.
accounts per person on average
Americans had data exposed last year
of accounts go unused after six months
Every account that ever emailed you, in one place.
Tombstone scans your Gmail metadata and maps every service: when they first contacted you, when they last did, how many emails they've sent, and whether they're in a known data breach.
- Sorted by risk and dormancy
- Cross-checked against breach databases
- One-tap deletion letter for each
Privacy score
685 accounts mapped
-
sh
Zombie
shopwss.com
Last email Dec 2025 · 13 emails
-
if
Zombie
ifttt.com
Last email Dec 2025 · 38 emails
-
sh
Breached
shutterfly.com
Last email Dec 2025 · 136 emails
-
he
Zombie
hertz.com
Last email Dec 2025 · 21 emails
-
my
Breached
myspace.com
Last email Apr 2014 · 4 emails
Sample data for illustration.
Three steps. Two minutes.
-
01
Connect Gmail
Metadata-only access. We can't read your messages: Google's permission won't allow it.
-
02
We scan
Every sender, every old subscription, every dormant account, cross-checked against breach databases.
-
03
You delete
We draft a GDPR or CCPA deletion letter for each. You review and send in one tap.
The full account map needs Gmail
The free check above sees only public leak databases. Connecting Gmail lets Tombstone read your email headers (sender, subject, date) to find every service you ever signed up for, flag the ones you forgot, and help you delete them. It never reads message bodies.
We see less than your email app.
-
Headers only, never content
We read email headers: sender, subject, and date. We never read the body of any message.
-
We keep the summary, not your inbox
From your headers we build one thing: a list of which companies have your data and when they last reached out. That list is all we hold. Your actual emails are never stored.
-
Never used to train models
Your email data is never used to train any AI model, ours or anyone else's. It produces only your own report.
-
Disconnect erases everything
Logging out revokes Tombstone's access at Google, not just your session. Deleting your account wipes your data from our database.
Want the detail? Read the full privacy policy.
"Unsubscribing only stops the emails. The account stays open and the company keeps everything you handed over, until the day it turns up in a breach. I built Tombstone to find those forgotten accounts and actually get the data deleted, not just silenced."
Md Samad
Built Tombstone · University of Chicago
The short answers
Can you read my emails?
No. Google's metadata-only permission means we see sender, subject, and date, never bodies or attachments.
Do you actually delete the account?
We draft a GDPR or CCPA deletion request you can review and send in one tap. The company emails you back when it is done.
Is it free?
The breach check is free with no sign-up. Connecting Gmail is free during the private preview.
Bury the accounts you forgot you had.
Connect Gmail and see every forgotten account still holding your data, then choose what to delete.
Connect Gmail