Deleting your account

Account deletion is self-serve from Settings → Account. Click Delete account, confirm with your password (or OAuth re-auth), and the request is queued.

What happens after you confirm #

1. You're immediately signed out.
2. Your sessions are invalidated; existing API tokens stop working.
3. Within minutes, your account is marked deleted and is no longer visible in the UI.
4. Within 30 days, all personal data is purged from production storage: email, password hash, OAuth identifiers and stored OAuth access tokens (including the GitHub App user access token and its refresh token, if you had a GitHub connection), sources, lockfiles, analysis history, billing records. The deletion does not itself revoke the grant on github.com or uninstall the App from your account. To also remove DevUpdate.io from your GitHub authorized applications and uninstall the App, visit github.com → Settings → Applications.
5. Backups follow the same 30-day rotation; data is fully gone after the next rotation cycle completes.

What's preserved (anonymized) #

• Aggregate usage metrics: counts only, no user identifier.
• Tracked-source counts for the Explore catalog: your individual contribution drops, but the public catalog itself isn't affected.
• Billing records (invoices, subscription history, withdrawal-waiver consent) retained up to 10 years for German tax and commercial compliance (§147 AO, §257 HGB); reduced to the minimum required by law.

Active subscriptions #

If you delete an account with an active subscription, the subscription is canceled at the same time. You may be eligible for a pro-rata refund if you're inside the 14-day window; the refund preview shows up at the delete confirmation step.

Team accounts #

• Members can delete their personal account at any time. The team isn't affected; your seat opens up for re-assignment.
• Owners must transfer ownership before deleting their account. The delete-account flow surfaces this requirement and routes you to the team page if you're the only owner.

Recovery window #

There is no recovery window. Once the deletion is queued, the data is gone. If you think you might want to come back, downgrading to the Hobbyist tier preserves your account at no cost.

Automatic cleanup (we delete the account for you) #

Two automatic sweeps remove abandoned accounts so the platform stays tidy. Both are described in the Terms of Service and in the Privacy policy.

• Unverified signups (day 7). Accounts created with email and password that never verify the email address are removed 7 days after signup. A reminder email goes out around day 4. OAuth signups (GitHub, Google) are created already verified and are never affected.
• Inactive verified free-tier accounts (day 30). Verified accounts on the free Hobbyist tier that never add a tracked source and never connect a lockfile are removed 30 days after signup. You'll get up to five reminder emails first (around day 2, 5, 10, 20, and 27), and the day-27 mail is an explicit deletion warning. After deletion we send a final notification to the address on file.

Adding a single source or lockfile, upgrading to a paid plan, or joining a team takes your account out of these cohorts at any point in the sequence. If your account is removed under either policy, you are welcome to sign up again.