Draft for legal review, not yet in force. This describes how VoxelVenture works today, but it has not been reviewed by a lawyer. Highlighted [items] still need filling in.

Data retention

How long VoxelVenture keeps each kind of information, and what is removed when.

Version 0.1 · Drafted 2026-10-17

How long we keep things

Your account and email: Kept for: While your account is open; Then: Removed when you ask us to close it ([Contact email for privacy, refunds and complaints])
A sign-in on a device: Kept for: 30 days; Then: It stops working
Meeting and quote requests sent to a business: Kept for: 180 days; Then: The name, email, phone and message are wiped (and the email that told the business is deleted); that a request happened is kept for the figures
Nearby chat: Kept for: 7 days; Then: The text is wiped; the record is deleted after 37 days, unless it was reported
Private messages: Kept for: 90 days; Then: The text is wiped; that a message was sent is kept
A copy of a reported message: Kept for: Until the report is decided, then 180 days; Then: Wiped
Who is online now: Kept for: 1 day; Then: Deleted
Chat sign-in tickets: Kept for: 60 seconds, one use; Then: Deleted
Multiplayer error reports (with a scrambled network address): Kept for: Until the log reaches 2 MB, then one older copy; Then: Overwritten
Visits, button presses, purchases reported by businesses (with a scrambled network address), votes, coupon claims, feedback posts: Kept for: While the service runs; Then: Kept, to keep figures and results honest over time
The weeks an owner used their dashboard, and pilot check-in answers: Kept for: While the service runs; Then: Kept with the business, to compare the pilot over time
Payments, refunds and the action log: Kept for: [the period the law requires for accounting records]; Then: The action log cannot be deleted
Emails we sent: Kept for: While the service runs; Then: Kept
Backups of the database: Kept for: 14 days; Then: Deleted on our server
What your browser keeps (see the privacy policy): Kept for: Until you clear it; Then: The referral code expires after 30 days

Information	Kept for	Then
Your account and email	While your account is open	Removed when you ask us to close it ([Contact email for privacy, refunds and complaints])
A sign-in on a device	30 days	It stops working
Meeting and quote requests sent to a business	180 days	The name, email, phone and message are wiped (and the email that told the business is deleted); that a request happened is kept for the figures
Nearby chat	7 days	The text is wiped; the record is deleted after 37 days, unless it was reported
Private messages	90 days	The text is wiped; that a message was sent is kept
A copy of a reported message	Until the report is decided, then 180 days	Wiped
Who is online now	1 day	Deleted
Chat sign-in tickets	60 seconds, one use	Deleted
Multiplayer error reports (with a scrambled network address)	Until the log reaches 2 MB, then one older copy	Overwritten
Visits, button presses, purchases reported by businesses (with a scrambled network address), votes, coupon claims, feedback posts	While the service runs	Kept, to keep figures and results honest over time
The weeks an owner used their dashboard, and pilot check-in answers	While the service runs	Kept with the business, to compare the pilot over time
Payments, refunds and the action log	[the period the law requires for accounting records]	The action log cannot be deleted
Emails we sent	While the service runs	Kept
Backups of the database	14 days	Deleted on our server
What your browser keeps (see the privacy policy)	Until you clear it	The referral code expires after 30 days

For review: Several things are kept with no end date (sent emails, visits and their scrambled addresses, the country list of arrivals, expired sign-in records). Decide limits and add clean-up jobs, or justify keeping them. Off-site backup copies uploaded with rclone are never deleted.