Somewhere in your inbox is a welcome email from an account you opened for a single purchase, a free trial, or a password reset you never finished. The account is still there, still holding whatever you told it: an address, a phone number, a birthday, sometimes a card. January is a good month to deal with the tail of logins you've accumulated — not for the satisfaction of a mass deletion, but because every dormant account is your data sitting on someone else's server under terms you last read years ago.

The routine takes an evening or two. Three stages: find what you've forgotten, export what matters, then ask for the rest to be erased.

Find the accounts you've forgotten

You won't remember them by thinking hard. Follow the paper trail instead.

• Search your email for "welcome to", "verify your email", "your subscription" and "reset your password". Sort oldest first if you can — the early years hold the ghosts.
• Open your password manager and sort by last used or date added. Anything untouched for two years is a candidate.
• Check the "sign in with" or connected apps lists in your Google, Apple and Microsoft accounts. They show services you'd never find any other way.
• Scan bank and card statements for small recurring charges. A modest monthly debit is often the last surviving evidence of an account.
• Look at saved autofill logins in your browser for sites you no longer visit.

Keep a plain list — a spreadsheet or a note — with three columns: the service, the email address you used, and what's actually in there.

Sort them: keep, export, delete

Every account lands in one of three buckets.

Keep. Anything tied to money, work, government services or a service you genuinely use. Tidy these rather than delete them: a unique password, two-factor authentication switched on, and any old email address updated.

Export. Accounts you're leaving that hold something you'd miss — photos, documents, messages, purchase history, playlists. Take a copy before you request deletion, because once it's gone it usually stays gone.

Delete. Everything else. Loyalty schemes, dead forums, trial accounts, the shop you bought from in 2019 and never went back to.

Export what matters before you pull the plug

Most large services offer a self-service export, usually under account settings and labelled "download your data", "export" or "takeout". Use it, then open the file. Exports often arrive as a ZIP archive full of JSON and CSV files that mean nothing in a photo viewer, so check the images and documents actually open before you delete anything.

No export tool? You can ask for a copy of your data under UK data protection law. Put the request in writing, describe what you want, and keep a copy of it. Organisations have a statutory deadline to respond, which they can extend for complex requests.

Where to keep the export

Put it somewhere you control: an external drive, or a cloud folder protected with two-factor authentication. Not a downloads folder on a shared laptop. For sensitive material — ID scans, medical letters, statements — use an encrypted archive, and make sure you'll remember the password. A forgotten password turns a tidy-up into a loss.

What "delete my account" actually means

These are not the same thing:

• Deactivating hides the account. The data usually stays put, and signing back in often restores everything.
• Deleting your account removes your profile and starts an erasure process. Some records may sit in backups for a set period, and anonymised or aggregated data may remain.
• Deleting the app changes nothing. The account carries on without you.

Under UK GDPR you have a right to erasure, but it isn't absolute. A company can refuse or narrow a request where it must keep data to meet a legal obligation — tax and financial records, for instance — to resolve a dispute, or to defend a legal claim. It may also keep a minimal note that you asked not to be contacted again, which is how suppression lists work. None of that makes the request pointless; it just means "deleted" has limits worth knowing about.

This is general information, not legal advice. If a request matters to you — a dispute, or sensitive data — speak to a solicitor or a qualified data protection adviser.

Sending an erasure request that gets results

1. Use the service's own deletion route first. Account settings, help centre or a privacy contact. It's quicker and leaves a record.
2. If that leads nowhere, email the privacy contact. The privacy notice should name a data protection officer or an address; if not, the general support address will do.
3. Be specific. Say you're exercising your right to erasure, name the account and the email address or username it uses, and state what you want deleted.
4. Ask for written confirmation when the work is done, and ask what they're keeping and why.
5. Keep a record of the date you sent it and any replies. If nothing happens within the statutory window, escalate with the company first, then with the Information Commissioner's Office.

Close the loose ends

Deleting the account is the middle of the job. Change any password you reused elsewhere and remove the entry from your password manager. Unlink the service from your Google or Apple sign-in. And if it used an old email address, check nothing important still routes through it before you abandon that address.

Data brokers and people-search sites need separate treatment. They scrape public records and marketing lists rather than holding an account you can log into, so there's nothing to delete in a settings menu. Send removal requests individually where an opt-out form exists, and expect to repeat it — listings reappear as new data is gathered. If a UK company ignores you, the Information Commissioner's Office is the regulator to raise it with.

Make it a January habit

Book one evening and work in batches. Twenty accounts

Photo: Thirdman / Pexels