Normal launch periods
| Information | Normal period | Action |
|---|---|---|
| Detailed contestant and finalised-event data | 30 days after successful finalisation | Delete or irreversibly anonymise approved statistics |
| Short-lived room, session, control and recovery data | Active session or shorter recovery period | Delete when the applicable state closes |
| Host account, quizzes and ordinary content | While active plus a 30-day closure-recovery period | Delete or anonymise, subject to records that must remain |
| Orders, Event Credit ledger, payment and refund evidence | Up to six years where required | Delete, minimise or retain only the required record |
| Document acceptance evidence | Normally no longer than six years after the relevant contract ends | Delete or minimise |
| Support and ordinary complaints | Normally 24 months after closure | Delete or minimise unless an active matter requires longer |
| Ordinary security and reliability records | Normally up to 90 days | Delete or aggregate unless needed for an active incident or claim |
Recovery copies and holds
Recovery copies follow bounded provider cycles. The launch design uses a seven-day database recovery window and seven-day recoverable media history. Restored information re-enters the applicable deletion or re-erasure process.
A documented legal, safety, security or regulatory hold can pause ordinary deletion for the minimum necessary scope and period. A hold does not permit unrelated use.