2026-09-13 17:11 UTC
GDPR says that data should only be kept as long as necessary for the fulfillment of what the user requested or consented to. So, I would say automatic account deletion after inactivity is a good idea for complying with the GDPR.
But you would typically implement that by sending out an e-mail before the deletion, to give the user a chance to keep their data. The GDPR does not block you from implementing that.
Replies (1)
-
@MrScottyTay@sh.itjust.works 2026-09-14 07:57
If you “own” stuff on such an amount though, one would argue that is the consent to keep at least enough data to be able to log in to access “bought” goods and services.