The account I forgot didn't forget me.

I found out the hard way. An account I had forgotten about was breached, and nobody told me. The first sign was trouble in my other accounts: the details leaked from that old one had been used to get into them.

That's when it clicked. The accounts you forget are the ones you can't protect. You can't change the password on a site you don't remember joining, and you can't close an account you don't know you have.

So I set out to find every old account tied to my email and close the ones I no longer needed. The best record of where I'd signed up was already in my inbox: welcome emails, receipts and password resets from services I'd stopped thinking about long ago.

Quitlist is the tool I built to do that. It reads the envelope of those emails, never the letter, to show you where you signed up. Then it helps you close what you don't need, so an old signup is one less way in.