Keep less. Delete deliberately.

Reading help

• Reading-help response cache: up to one hour.
• Dictionary response cache: up to 24 hours.
• OpenAI abuse-monitoring logs: provider-controlled, up to 30 days by default and potentially longer for legal or abuse investigation.

Security and usage

• Raw network addresses are not stored in the application database.
• Salted, hashed network and device identifiers are stored in expiring usage buckets for rate limits and allowance enforcement.
• Security evidence may be retained longer when reasonably necessary to investigate active abuse, meet legal obligations, or protect users.

Analytics

Privacy-conscious product events target deletion after 90 days. Analytics exclude highlighted text, nearby page text, page titles, full URLs, and browsing history.

Accounts and saved words

If accounts activate, profiles, preferences, saved words, referral records, and subscription status remain until the user deletes the item or account, subject to provider backup cycles, fraud prevention, financial record requirements, and lawful holds.

Payments

Stripe controls retention of payment records under its policies and legal duties. WordHalo retains subscription and transaction references needed for access, accounting, refunds, disputes, and fraud prevention—not complete card numbers.

Deletion and export

Account export and deletion routes exist but remain inactive until Supabase is configured and verified. A monitored request address must be published before launch for waitlist, support, and anonymous analytics requests that cannot be completed through an account.