Keep less. Delete predictably.

Files used in server-assisted jobs expire within 24 hours. Delete now removes the job objects and their encryption key sooner. Browser-processed files are not uploaded by that workflow.

Anonymous daily aggregate counts are retained. Random page-event IDs, consented page events, sessions and daily unique records expire after 90 days. Optional visitor profiles expire after one year of inactivity; browser visitor tokens last up to one year and sessions renew after 30 minutes of inactivity. Withdrawing analytics consent deletes linked profile, session and page-event records. Consent preferences remain on your device until changed.

Account and active API-key metadata remains while the account is used. Revoked key metadata and security records may be retained to prevent abuse and demonstrate revocation. API request metadata is designed for a 30-day operational window.

Tickets are retained while they are open and for a limited period afterward for follow-up, security, and legal record keeping, then deleted or anonymised according to operational policy.

Deletion from active systems may take additional time to age out of encrypted backups. A narrow legal or security hold can extend a record’s retention when required.