# DSAR, Access & Data Portability Overview

Last updated: 2026-02-26

This public guide describes how Catcord handles data subject access requests (DSAR), data portability, deletion requests, and retention boundaries.

## 1. How to request access or portability

You can request your account data export in two ways:

1. **Self-service in dashboard**
   - Sign in at `/dashboard` with Discord OAuth.
   - Use **Privacy & data controls** and select JSON or ZIP export.
   - Catcord requires a recent sign-in confirmation and CSRF validation.
   - The download is completed through a one-time POST handoff (no token in URL query parameters).
2. **Email request**
   - Send the request from your account email context to `support@catcord.app`.
   - Include your Discord user ID and whether you want JSON or ZIP format.

## 2. DSAR fulfillment timeline

- We confirm receipt of DSAR requests as soon as possible.
- We complete requests within **30 days** under normal circumstances.
- If legal exceptions or complexity applies, we inform you with reasons and expected timeline.

## 3. Deletion requests and boundaries

You can start account deletion from `/account/delete` after signing in. For security, Catcord requires a **fresh sign-in** (time-bounded re-verification window) before deletion can be submitted; if your session is stale, you must re-authenticate with Discord first.

Deletion scope includes personal profile, reminders, usage records, notification logs, vote-related history, and linked billing metadata that Catcord controls directly.

Retention boundaries:

- Data with an active legal or accounting retention obligation is archived for the legally required period.
- Payment-provider primary records remain with the provider under their legal obligations and contracts.
- Minimal security logs may be kept for abuse prevention and incident response within documented limits and are retained only for defined operational windows before scheduled cleanup.

## 4. Data categories and retention windows

The privacy policy at `/privacy` contains the authoritative retention matrix.

At a high level, Catcord applies fixed retention windows to operational datasets (usage events, reminder events, vote records, billing archive fields, and user profile rows) and runs regular cleanup jobs.

## 5. Your rights

Depending on applicable law (including GDPR), you may have the right to:

- Access your personal data.
- Receive a portable copy of your personal data.
- Request correction of inaccurate data.
- Request deletion of personal data.
- Restrict or object to certain processing.
- Lodge a complaint with a supervisory authority.

Primary contact: `support@catcord.app`.

## 6. Consent persistence and withdrawal

- Cookie and preference consent choices persist across sessions until expiry or manual change.
- You can withdraw or change consent any time via the cookie controls; withdrawal stops non-essential storage from that point forward.
- Withdrawal does not retroactively remove records already processed under earlier valid consent, but future processing follows your updated choice.

## 7. Logging and retention behavior

- Catcord logs account-export and account-deletion security events (for example: denied due to stale re-authentication, successful request, and token lifecycle) to support abuse prevention and incident forensics.
- Audit logs are minimized (no raw OAuth tokens or deletion confirmation text) and rotated according to the retention policy described in `/privacy`.
- When legal retention duties apply, constrained archival records may remain until those obligations expire; then they are purged through scheduled retention jobs.

## 8. Related public policy pages

- Privacy policy: `/privacy`
- Terms: `/terms`
- Cookies: `/cookies`
- Imprint/legal notice: `/impressum`
- Public docs index: `/docs/index.html`