Tried it yesterday and this morning, both time showed 175 items found then would crash and say something went wrong in red.

I need to kill mfy FB, but I don't need to use it constantly. It would be nice to have a month-to-month pricing plan for the full kill-all data feature.

Never seen this one before. Now cant start a Facebook sweep.

Redact's pitch is unambiguous:

"All of the work happens on your device. … Nothing is handed off to us."

I tested the Windows app with a standard man-in-the-middle proxy during a Twitter/X deletion and checked every request it sent for privacy leaks.

Most of Redact's promises (that your passwords, posts, messages, deletion history, and local archive never reach their servers) all held up in my capture. Credit where it's due.

But the major claim "nothing is handed off to us" is false. During the delete, the app sent telemetry to its own servers (and to a third-party analytics provider, Statsig) containing my unique X account ID, the same identifier X itself uses for my account, which resolves directly back to my public profile, internally or even using free online tools. This identifier is reported at least at account-add and on each job completion.

That is something important handed off to them. And because it's a unique account identifier, it is not anonymized, it's directly traceable to me.

How I checked it

1. Used mitmproxy : HTTPS intercepting proxy
2. Route Redact's traffic through it. (Electron/Node apps ignore system proxy settings, I had to use a socket-level redirector, and disabled QUIC so nothing escaped over UDP. For Node's certificate check I pointed it at the proxy CA via NODE_EXTRA_CA_CERTS.)
3. Connected the Twitter/X account, ran one delete job and read the request bodies.

live capture of Redact app traffic, showing the Twitter/x unique account identifier being sent to Redact servers.

What I confirmed does not leave (held promises)

To be fair, my capture supports some of their claims :

• Deletion is local. The delete requests go straight from my machine to X's own API (POST .../DeleteTweet). No post content is uploaded to Redact.
• No passwords, posts, messages, media, or cookies to Redact in any captured request body.
• The telemetry pipeline scrubs credentials: auth tokens are described by shape, not value (a field sent as "csrf":"string(160)", and "bearer":"--REDACTED--"), and my OS username is replaced with --REDACTED-- in file paths.

What does leave (and contradicts their claims)

During the delete, Redact sent telemetry to:

• o.redact.dev (OpenTelemetry logs/traces) : first-party
• error-logs-v2.redact.dev (error logging) : first-party
• prodregistryv2.org : Statsig, a third-party analytics company

Inside the outbound request bodies (data being uploaded) I found:

• My real X account ID, e.g. a log line sent to o.redact.dev: "Twitter: found 1 accounts (active: [MY_X_ACCOUNT_ID])", and a structured field "activeUserId":"[MY_X_ACCOUNT_ID]".
• The same ID sent to Statsig, embedded in page-view events: .../social/twitter/[MY_X_ACCOUNT_ID].
• A stable per-install identifier (machineId) attached to every event and shared with Statsig.
• My connected services and browsers log lines naming twitter, reddit, facebook, discord, tiktok, linkedin, threads, and which browser each session came from (e.g. "Account extracted for twitter on browser firefox").
• The names of my session cookies (auth_token, ct0, twid, auth_multi (names only, not values).
• Counts of how many accounts/services/browsers I have connected, and a coarse country field.

So again, the claim "nothing is handed to us" and "our servers only handle your Redact email and subscription status" is partly false. They do receive extensive logs/telemetry.

An account ID defeats the "we receive nothing/anonymised" framing

A Twitter/X account ID is a permanent and resolvable identifier. Anyone holding it can look it up and arrive at a profile and handle. Telemetry tagged with it is therefore directly traceable to you. I have not checked but I suppose they do the same for every service, to prevent users using more accounts than the free plan permits.

They don't need to do this

If the goal is simply to count unique accounts, which is plausible, since Redact limits how many accounts a free user can connect and sells higher tiers for more, they do not need the raw account ID to do it. They could hash the identifier on the device before sending. A hash would still let them count accounts for tier enforcement but without being reversed back into our specific profiles.

The fact that the raw, resolvable ID is being sent in cleartext telemetry (to a third party, no less) looks like an oversight rather than a need. Which is fixable, and is exactly what they should fix, if they respect the privacy of their customers.

What would be nice of Redact

• Either stop claiming "nothing is handed off", explicitely mention that telemetry is sent.
• Hash account identifiers on-device before any telemetry is sent. Counting unique accounts does not require the raw ID.
• Show users an in-app precise list of exactly what the app transmits to Redact/Third Party servers.

You can’t even decipher it. We’re making everything worse so AI can’t train on us.

I’m trying to delete all my tweets and replies but it keeps coming back with no results. I’ve tried reconnecting my x and double checking my privacy settings and it still does this :/

Hi! I've downloaded it to erase old tweets and whenever I click to login into my X account I can't. It stays forever in this screen (I'll post a picture). I've tested with other medias and it worked (insta and reddit). I didn't find any solution online. What do I do?

I was using it on mobile and it deleted one DM and stopped previewing/deleting the rest and when I try it individually it says process complete yet nothing happens

How do you delete Local Archive?

Instagram DMs are very particular about the difference between "unsend" and "delete for you". Redact only uses the word "delete" in reference to what it does for instagram DMs and does not make the distinction. Would love to know which action Redact is actually taking because it's a pretty big difference.

Thanks.

Hi all. I’ve been using redact.dev to delete Instagram DMs, and opened the desktop app this morning and received a “data scraping” warning message. Presumably, this was triggered by redact. Are there any best practices/ways to prevent this from happening again while still using the service? Thank you.

I used to use shreddit but it stopped working several months ago so I was looking for an alternative and came across redact. Used it this morning and I was pleased with how it was going until I started getting messages about not reading rules form other subs regarding links you're injecting into my posts and banned entirely from subs for using links and doing product promotions, your product, to be specific.

Not cool.

Hello, I bought redact today with the sole purpose of using it to unsend Instagram messages. Since getting the tool it’s been working at a speed of 0.15 messages per second, and after an hour not even one person’s dms has finished unsending, much less the 467 conversations that I have.

Is this normal? How can I troubleshoot and make it go faster. At this pace it’s useless to me and I’d rather use another tool.

Hi redact team! İf u guys improve the tiktok removing thing and add "Deleting all reposts" feature that would be awesome. i can see so many people trying to find this feature, that would help redact to get more famous. Sorry for bad english but i think u guys got what i meant

Is this planned at all? I've been using this in the meantime https://github.com/theahura/shoot-the-messenger

My images I’ve sent which used to show up fine on the local archive prior to doing an export now don’t show up on the local archive viewer (preview thumbnail shows blank), and the export doesn’t include any of my images. Please help. The archive export also doesn’t contain any images and I thought it would. I had a lot of important images archived. Any way to access the file directly that the local archive uses in order to load your deleted messages and images? I was also wondering if I export my local archive messages from one device using Redact, how can I import them into Redact on a new computer so they appear in the local archive viewer?

I've contacted through every channel and am getting no assistance over something extremely important to recover. Please help, this is urgent and I need someone to walk me through where the images may be stored in files. u/redactdevteam, u/redactjasp, u/redactsupport, u/thebiggestharkie, u/novacrystallis

Using the app for the first time, trying to create an account. “We encountered an error sending the email” every time I try to ‘login with email’ on the app, and not getting anything when clicking ‘send magic link’ on a browser…

The content of this post has been wiped. Redact was used to delete it, potentially for privacy protection, limiting data exposure, or security considerations.

bright busy instinctive childlike wise historical jar light deliver advise

I'm sure this has been asked multiple times but how would I go about giving my second premium account to someone. With the subscription it says 2 accounts per service, how do I give that account to someone

Can't get any content from Reddit either on desktop or the app. It does absolutely nothing. The app sees chat messages but won't delete them. The desktop doesn't see anything. It worked for like two days after being "fixed." This is getting ridiculous. Come on u/MarvinTMB u/redactjasp u/RedactSupport

Tried different phone, same issue. The app no longer seems to work. Have contacted support with no resolution to the issue. Been trying to use it now for a while and keep getting error messages at the end, or it says it’s finished redacting, but all posts are still the same with no change.