How long we keep each kind of data. [[LAWYER: confirm each period, especially anything the law requires us to keep.]]
| Data | How long | Why |
|---|---|---|
| Account, profile, personas, posts, comments, votes, follows, drafts | Until you delete your account, plus a 7-day restore window, then permanently deleted | Run the service; let you change your mind |
| Pictures, videos, files you uploaded | Deleted with the content or account | Same |
| Private chat messages (encrypted) | Until you or the other person deletes them, the disappearing-message timer runs out, or an account is deleted | Delivery |
| Backups | Up to 30 days after deletion | Disaster recovery. Deleted data is not restored after a recovery. |
| Server logs (technical, including IP address) | [[30]] days | Security and fault-finding |
| Reports, moderation decisions and information about removed content | [[at least 180 days after the case ends; verify the legal minimum]] | Safety, appeals, legal requirements |
| Records of your agreement to our terms | While your account exists and for [[period]] afterwards | Proof of consent |
| Staff audit logs (no message content) | [[1 year]] | Accountability |
Where the law requires us to keep something longer than the periods above, we keep only what is required and only for as long as required.