Legal information

Data Deletion Policy

This page explains how account deletion works in Deer Chat and which categories of data are typically removed, cleared, or may still be retained after deletion where operationally necessary.

Open the legal information center

1. How deletion is initiated

Users may initiate account deletion through a supported Deer Chat interface. In the current architecture, deletion may require confirmation with the current password and an active authenticated session.

2. What is typically deleted

  • The user account itself.
  • Associated user devices and service-side device records.
  • Related prekeys, ratchet state, and similar technical cryptographic records where present in backend flows.
  • Personal contact display names / aliases related to the deleted user.
  • Attachments uploaded by that user where the server-side deletion logic is configured to remove them.

3. What may not be removed instantly

Some data may be deleted as part of background processing, operational cleanup, or cascading removal after the primary deletion request. Users should not interpret a technical delay as refusal of deletion.

4. What may still be retained

  • Security events and system audit records needed to protect the service and investigate incidents.
  • Limited operational log context where required to preserve infrastructure integrity or comply with legal obligations.
  • Certain records that have been anonymized, detached from the user, or retained in a minimal technical form.
Retention of such records does not mean continued use of the deleted account. It reflects operational and security requirements of the service.

5. Limitations

  • Deletion may be blocked for the last remaining administrator if deleting that account would compromise service administration.
  • If the account has already been deleted or the session is invalid, deletion may require re-authentication or support contact.

6. Relationship to other documents

This page complements the Privacy Policy and Terms of Service. If there is a difference between general product-facing descriptions and the actual implementation, the current server-side deletion logic and applicable law take priority.