What Safety holds
In plain wordsTechnical detail
| What | Why | Who can see it | Kept for | Retention schedule |
|---|---|---|---|---|
| Reports you have made | Deciding a case and weighing reports. | You and staff | With the case: 12 months after it closes with no action; 24 after a notice, mute, suspension or withdrawn item; 36 after an account is removed. | Not listed yet |
| Cases | Where a case stands and what the rules worked out. | Staff | With the case: 12 months after it closes with no action; 24 after a notice, mute, suspension or withdrawn item; 36 after an account is removed. | Not listed yet |
| Evidence packetsAlso about people who are not members | Fixed evidence of what was reported, and a scrambled network address of whoever filed it. | Staff | With the case: 12 months after it closes with no action; 24 after a notice, mute, suspension or withdrawn item; 36 after an account is removed. The network details are dropped after 90 days. | Not listed yet |
| Removal requests, notices and disputesAlso about people who are not members | Proving a removal request, a copyright notice or a dispute was valid, and answering it. | You and staff | Intimate-image requests: 5 years after the ticket closes. Copyright: 3 years. Disputes and visitor reports: 24 months. Contact details are erased sooner on request; the network hash after 30 days. | Not listed yet |
| Decisions about you | Decisions and their history. | You and staff | With the case: 12 months after it closes with no action; 24 after a notice, mute, suspension or withdrawn item; 36 after an account is removed. | Not listed yet |
| Strikes | What a decision counts for, and until when. | You and staff | With the case. A strike counts for 12 months. | Not listed yet |
| Second looks | Second looks. | You and staff | With the case: 12 months after it closes with no action; 24 after a notice, mute, suspension or withdrawn item; 36 after an account is removed. | Not listed yet |
| Checklists | The steps taken in a child-safety, age, threat or legal matter. | Staff | At least 1 year from the outside report, then with the case; longer only under a legal hold. | Not listed yet |
| Age re-checks | The record of an age re-check. No date of birth is kept. | You and staff | 36 months. | Not listed yet |
| Reporting record | Weighing reports. | Staff | While the account exists. | Not listed yet |
| Legal requestsAlso about people who are not members | Legal process received. | Staff | 6 years after it closes. | Not listed yet |
| Return flags | Noticing the return of a removed member. A keyed hash of name and school that only ever flags. | Staff | 24 months. | Not listed yet |
| Payments logAlso about people who are not members | Refunds and bank disputes, by ticket. No card data and no payer name. | Staff | 7 years. | Not listed yet |
| Temporary holds on your account | Pausing part of an account for a short fixed time when its activity looks like abuse, while a person looks. The rule that tripped, the counts and times, and what a person did. No message text. | You and staff | 90 days after the hold ends. | Not listed yet |
| What happened to a hold | What happened to a hold: raised, repeated, extended, released, run out, sent to moderation. No message text. | Staff | With the hold: 90 days after it ends. | Not listed yet |
| Counts behind the hold rules | The small events the hold rules count: a rate limit that refused, a link a new account tried to send. A kind of event and the name of the limit, never what was written. | Staff | 48 hours. | Not listed yet |