Data Retention Policy

Overview

This policy describes how long StrikeMap retains each category of data and the processes for requesting deletion. It supplements our Privacy Policy and complies with the Swiss Federal Act on Data Protection (FADP) and the EU/UK General Data Protection Regulation (GDPR).

1. User Account Data

Account information — email address, display name, authentication credentials, avatar, country code, and account preferences — is retained for as long as your account is active.

If you request account deletion, your account data will be permanently deleted within 30 days of the request. During this period, your account is deactivated and inaccessible. After deletion, we retain no personal account information.

2. Payment and Subscription Data

Your Stripe customer ID and subscription status are retained for as long as your account is active and for up to 7 years after cancellation or account deletion to comply with Swiss bookkeeping and tax obligations (Swiss Code of Obligations, Art. 958f).

We do not store credit card numbers, bank details, or other payment instrument information. These are held exclusively by Stripe under their own retention policies. For details, see Stripe's Privacy Policy.

3. Conflict and Intelligence Data

Structured conflict records — incidents, strikes, alerts, interception reports, and all associated enrichments — are retained indefinitely. This data constitutes the historical intelligence record and is the core product of the Platform.

Conflict data is aggregated from third-party sources and processed into anonymized, structured records. It does not contain personal user data. Retention of this data is essential to the Platform's purpose as a historical and analytical resource and is justified under FADP and GDPR provisions for archiving in the public interest.

4. Chat Messages

Messages posted in the public real-time chat are retained for moderation, safety, and audit purposes. Chat messages may be pruned after 12 months to manage storage, though messages flagged for moderation review may be retained longer.

If your account is deleted, your chat messages will be anonymized (display name removed and replaced with a generic identifier) rather than deleted, to preserve conversation context and moderation records. This anonymization renders the messages non-personal data.

5. Push Notification Subscriptions

Push notification endpoint URLs, encryption keys, and device labels are retained for as long as the subscription is active. Subscriptions are automatically removed when the push endpoint becomes invalid (browser unsubscribes or the endpoint expires).

You can remove your push subscription at any time by disabling notifications in your browser settings or through the Platform's notification preferences. Upon removal, the subscription data is permanently deleted.

6. Moderation Records

Chat ban records (reason, duration, channel scope) are retained for 24 months after the ban expires to support enforcement of repeat-violation policies. For permanent bans, records are retained for as long as the ban is in effect. If the banned user's account is deleted, moderation records are anonymized but retained.

7. Analytics and Server Logs

Usage analytics, access logs, and server logs are retained for 90 days. These logs are used for security monitoring, abuse detection, performance optimization, and aggregate usage analysis.

After 90 days, logs are permanently deleted. Aggregate statistics derived from logs (total page views, feature usage counts) may be retained indefinitely, but these contain no personally identifiable information.

8. Cookies and Local Storage

Session cookies expire when you close your browser. Persistent cookies — used for preferences such as theme selection and authentication tokens — have defined expiration periods as described in our Privacy Policy.

Local storage entries (theme preference, guest chat identifier) persist until you clear your browser data or the Platform removes them. You can delete cookies and local storage at any time through your browser settings.

9. Requesting Deletion of Personal Data

To request deletion of your personal data, contact us at team@strikemap.live. Include your account email and specify what data you would like deleted. We will respond within 30 days as required by the GDPR and FADP.

You can also delete your account directly through your account settings, which initiates the 30-day deletion process described in Section 1.

For full details on your privacy rights and how to exercise them, see our Privacy Policy.

10. Right to Erasure — Scope and Limitations

Under the GDPR right to erasure (Art. 17) and the Swiss FADP right to deletion (Art. 32), you can request deletion of your personal data. We will comply with valid requests, with the following limitations:

• Account data — Fully deletable upon request (email, display name, credentials, preferences, avatar, profile data).
• Payment records — Stripe customer ID and transaction records retained for up to 7 years due to Swiss legal bookkeeping requirements (Art. 958f CO). We will inform you of this limitation when processing your request.
• Chat messages — Anonymized upon account deletion. The message content may be retained with your identity removed, rendering it non-personal data.
• Push subscriptions — Fully deletable upon request.
• Conflict data — Aggregated intelligence records do not contain personal data and are not subject to erasure requests.
• Legal obligations — We may retain data beyond your deletion request where required by Swiss law or necessary for the establishment, exercise, or defense of legal claims.

If you have questions about what data can be deleted in your specific case, contact us at team@strikemap.live and we will provide a detailed response.

Retention Summary