Data Retention and Deletion Policy
Quantum Shield stores only data reasonably needed for account, security, subscription, monitoring/removal, notification and support functions.
| Data | Current default |
|---|---|
| Expired/revoked session records | 30 days after expiry/revocation |
| Verification/reset/passkey challenges | 1 day after expiry |
| Rate-limit buckets | 2 days |
| Audit/security events | 365 days |
| Notification events | 365 days |
| Optional diagnostic reports | 30 days |
| Resolved exposure findings | 730 days |
| Completed removal requests | 730 days |
| Deletion receipts | 90 days |
Account deletion
Verified deletion requests revoke sessions and remove account-linked identities, consents, preferences, exposure/removal history, notifications and other account data through server-side workflows. Applicable processor deletion work is also queued where required/supported.
Exceptions
Limited records may be retained where reasonably necessary for security, fraud prevention, legal obligations or to document completion of a deletion request. Backup copies may remain until normal backup rotation completes and should not be restored for ordinary product use after deletion.
Google Play subscription
Account deletion does not cancel the Google Play subscription.