How long we keep data
Last updated: October 7, 2026
Overview
The short rule: we keep your data while your account exists, and delete it when you delete it.
| Data | How long |
|---|---|
| Account (email, sign-in record, language) | Until you delete your account |
| Charts, people, open positions, photos | Until you delete them, the chart or your account |
| Named versions | Until you delete the version, the chart or your account |
| Removed or replaced photos | Kept while undo or a saved version may still use them, then deleted automatically |
| Share-link settings and password hash | Until you turn the link off, delete the chart or delete your account |
| Plan record and Pass purchases | Until you delete your account |
| Records of Stripe payment events (event ID, type, time) | Kept as a technical record so a payment is never applied twice; they contain no name or email address |
| Invoices and payment records at Stripe | As long as tax and accounting law requires: 10 years |
| Withdrawal and cancellation requests, checkout consent records (name, email, request content, time) | 3 years after the request (limitation period and proof; consent records must be kept as proof), then deleted |
| Emails you send us | As long as needed to answer, and longer only where the law requires it |
| Hosting logs (Vercel) | 1 day |
| Share-password attempt counters (IP address) | In server memory only, at most 15 minutes |
| Charts without an account, private-mode charts, browser backups | In your browser until you clear them; we never receive them |
| Database backups | None (we keep no database backups) |
When you delete a chart
The chart, its versions, its share link and its photos are removed from the live service at once. The share link stops working immediately.
When you delete your account
You delete your account yourself in the account settings, after typing your email address to confirm. We first delete all your photo files, then your account, which removes your charts, versions, share settings, plan record and Pass records with it. You are signed out at once.
Before you delete, download the account export: we cannot bring anything back afterwards. A running Pro subscription is cancelled at Stripe at the same time, so it can never renew. Stripe keeps its records of your payments and invoices as the law requires.
Backups
We keep no database backups, so no copies remain after deletion.