Measurement

Data Retention Policy

GeoLira minimizes retention by data type. Anonymous community records have bounded retention, terminal Telegram delivery rows expire, and private owner data remains user-controlled until deletion or a documented account-retention rule applies.

Foundation

GeoLira minimizes retention by data type. Anonymous community records have bounded retention, terminal Telegram delivery rows expire, and private owner data remains user-controlled until deletion or a documented account-retention rule applies.

Exact retention periods for anonymous and operational data

The current retention contract keeps anonymous community check-ins for 30 days, global intentions for 120 days and sacred-place suggestions for 365 days. Terminal Telegram delivery records in DELIVERED or DEAD state are removed after 30 days. These periods are defined in the runtime policy code rather than only in interface copy.

Private owner data and deletion rights

Owner-scoped private data has no automatic TTL in the current contract. The policy provides deletion on user request. Raw IP addresses are not persisted as rate-limit data. For selected anonymous features the system issues a deletion token that lets the holder of the receipt remove their own submission without requiring a public account identity.

Daily purge and browser-versus-server deletion

The nexaearth_privacy_retention_daily scheduler runs the retention process daily and computes cutoffs in UTC. Purging applies to the relevant server tables and only to terminal Telegram deliveries. Clearing localStorage, cookies or browser cache is not a server-side deletion request and may only remove a local receipt or session needed to perform a later operation.