This policy supplements our Privacy Policy with retention and deletion periods. These protections apply worldwide, preserving stronger legal rights.
We keep information only while needed for its purpose. Unless identified as a statutory minimum, each period is the longest we keep that information by default.
Retention periods
| Information | Our default period |
|---|---|
| Local age eligibility declaration | On your device for that installation, until replaced or cleared with the relevant app/browser data. |
| Uncompleted account registration | Up to 7 days. Verification tokens expire sooner. |
| Account and profile | While active. Free accounts are reviewed after 24 months of inactivity, with 30 days’ notice before deletion. |
| Sign-in and device sessions | Revoked on relevant sign-out, deletion or suspected compromise; expired records deleted within 7 days. |
| IP addresses in device activation records | Not retained. Used when a device is activated; device activation records keep no IP address. |
| Licence and entitlement records | While access is active; after closure, necessary transaction, security or compliance records follow their periods below. |
| Account restrictions | Minimum necessary records while justified, reviewed at least every 90 days. |
| Complaints, incidents and disputes | Documented case-specific period, reviewed annually; limited evidence kept separately from ordinary account records. |
| Unconfirmed email signups | Up to 8 days after signup. The confirmation link expires after 7 days. |
| Email communication signups | Until you withdraw, we discontinue that communication, or 30 days after the last message we send you under it, whichever happens first. |
| Email delivery records | Delivery status and message references for each email we send: up to 30 days after the send completes, or sooner if the signup or message they belong to is deleted first. |
| Email signup evidence | A minimal record of when and where you signed up, confirmed or withdrew, kept apart from the signup: while relied upon and up to 24 months after the signup ends. |
| Support and contact messages | Up to 24 months after closure or last substantive contact, whichever is later; sooner when unnecessary or on a valid deletion request. |
| Routine technical logs | Up to 30 days. |
| Security and abuse-prevention events | Up to 90 days, unless necessary evidence is moved into a restricted incident or enforcement record. |
| Optional crash reports and diagnostic attachments | Up to 30 days from when the event occurred. Performance traces: up to 14 days. Release-health sessions: up to 30 days. Aggregated crash summaries (counts and stack signatures, without installation identifiers) are kept for as long as the same fault keeps recurring. We delete crash reports, attachments, performance traces and release-health sessions sooner on a valid request; see Privacy for installation-based requests. |
| Individual advertising events | Up to 30 days before deletion or aggregation that no longer identifies you. |
| Aggregate operational statistics | Up to 24 months, with periodic checks that the statistics remain useful and do not identify people. |
| Privacy requests and responses | Minimal compliance record for 24 months after closure, including applicable statutory minima; longer only for a specific duty or documented dispute. No extra copy of the exported account. |
| Privacy-request identity documents | Avoided where possible; if needed, deleted within 7 days after verification, retaining only the minimum result. |
| Optional-consent evidence | While relied upon and up to 24 months afterwards to demonstrate your choice and our response. Evidence retention does not extend consent or override withdrawal. |
| Marketing opt-out | Minimum identifier needed to prevent unwanted contact (a one-way hash of your email address), reviewed annually. A record that only limits how often we resend a confirmation email is deleted after 90 days. |
| Tax and transaction records | The applicable statutory period. Ordinary Australian business records are generally kept for 5 years from the later of preparation/receipt and transaction completion; some records require longer. If EU VAT One Stop Shop applies, its relevant transaction records are kept for 10 years from the end of the transaction year. |
Browser-storage durations and consent renewal are in Privacy’s cookies section.
Deleting your information
Use the account-deletion and privacy-request routes in our Privacy Policy. Proportionate identity verification may be needed; an account is not required to make a request.
We target active-system deletion within 28 days of a valid request, subject to shorter legal deadlines. Permitted extensions are explained within the original response period. We explain any information retained, its reason and retention criteria.
Account deletion does not erase local files or independently held provider copies. Support, diagnostics, AI and cloud data follow the processing paths in Privacy.
Backups and exceptions
After active deletion, residual backups are isolated from ordinary use and expire within 35 days. The periods above apply to active systems, so a backup copy can outlast them by up to 35 days. If a backup is restored, deletion instructions are applied before the restored data becomes available for normal use.
Limited legal-duty, dispute, security-incident or continuing-enforcement records may remain, with restricted access/use, documented reasons and necessity reviews. A ban or dispute does not justify keeping the whole account indefinitely.
Removing names or hashing identifiers is not necessarily anonymisation. Linkable identifiers remain personal information; aggregates must be assessed for identification risk.
Service providers
These periods cover our processors’ database and support-mailbox copies. Providers’ independent processing follows their own notices; deleting our copy does not erase their independent records. See Privacy.