Retention, removal and recovery
Under-13 account/profile and identifiable game data are removed after 24 calendar months without a successful account login or confirmed recorded play, after a full 30-day notice period. Played dates, not later import dates, count as play. A late warning gives the recipient a full 30 days. Verified guardians may request removal sooner. Uncertain warning delivery never authorizes removal.
Unused consent requests/invitations expire after 14 days. A created child login whose email activation remains uncompleted is removed after 14 days. An under-13-origin account awaiting its adult transition remains subject to inactivity review; after age 18 the notice goes to its verified adult owner, not the former guardian. Signed documents and ended-consent records are removed within 30 days after consent ends or the private account is removed. Verified withdrawal immediately suspends the child account; active-data removal following an ended consent or verified deletion request completes within 30 days. Only minimal non-content security/deletion-status metadata is retained for up to 90 days. These limits are not permission to retain unnecessary personal information.
Encrypted hourly snapshots expire after 30 days under the private snapshots policy; provider deletion is asynchronous. Removal can void/redact affected results and recalculate ratings, while unrelated games remain. A separate encrypted recovery checkpoint prevents an older backup from reopening account access after a protected privacy/security change. A mismatched restore stays closed for operator reconciliation; it is not silently served. Do not call every copy erased while backups remain.