Delete your account

On the web

Sign in and open your account data controls. You can download a copy first, then choose Delete my account. Password accounts confirm with their password; provider-only accounts confirm with their signed-in session. Deletion is immediate, with no support ticket or waiting period.

In the app

Open Verdict and go to Settings → Delete account. Password accounts confirm with their password; provider-only accounts confirm with their signed-in session. Your account is deleted immediately: no waiting period, no support ticket. If you subscribed through the App Store or Google Play, also cancel the subscription in your store account (stores don't let us cancel it for you).

Playing without an account? Nothing to delete: your progress lives only on your device. Reinstalling or clearing app data wipes it.

By email

If you can't reach the app, email hello@endpaperlabs.com from the address on your account and ask us to delete it. We'll verify it's you and complete the deletion within 30 days (usually much sooner).

What gets deleted

Deletion is permanent and immediately removes from our live systems:

• Your email and name
• Your account's first-touch acquisition source and campaign
• Your password (we only ever store a hash)
• Your puzzle results, streaks, and stats
• Optional cancellation feedback you submitted
• Your account-linked product-research answers, optional written details, and interview-consent timestamps
• Your push-notification tokens and sign-in sessions
• Any pending email-change or password-reset tokens
• Your account-owned email-delivery history (including pending and former addresses) and permanent-bounce suppression provenance
• Your payment profile at our payment processors (we ask Stripe to delete your customer record, and RevenueCat to delete your purchase record)

What we keep, and for how long

• Bug reports you sent may be retained for engineering history, but they are anonymized: the account link and your email are removed.
• Late-email-event fence: an opaque random delivery id and expiry, with no account, address digest, or provider id, remains for 31 days so a delayed signed webhook cannot recreate erased delivery data.
• Payment records: Stripe retains transaction records after we delete your customer profile, as required for tax and financial compliance.
• Our de-identified payment ledger: for real payments, we remove the account, cohort, acquisition, store, SKU, and plan links and reduce dates to a month. We retain the native currency and substantiated amounts plus pseudonymous SHA-256 digests of provider occurrence/object identifiers. The digests are not anonymous: they exist only to deduplicate retries and reconcile partial refunds, reversals, and disputes, and remain for the applicable tax, accounting, refund, and dispute retention period. Raw provider identifiers are never stored in this ledger.
• De-identified conversion records: confirmed signup and purchase rows keep limited operational facts such as time, product, and test/internal status. Your account id, acquisition cohort, provider ids, and identifying payment metadata are removed.
• Error logs: our error tracker (Sentry) may hold technical logs referencing your internal account id. We configure it not to collect routine personal fields or request credentials, and these logs expire automatically within 90 days.
• Backups: encrypted database backups may contain your data for up to 30 days after deletion, then expire automatically. Backups are only ever used for disaster recovery.
• Deletion record: we keep a one-line log that an account with your (now-meaningless) internal id was deleted, as evidence the deletion happened.

Get a copy of your data first

Before deleting, you can download everything we hold about your account as JSON from the Download my data control, or email us and we'll send the export within 30 days.

Questions

See our Privacy Policy for the full picture, or reach us any time at hello@endpaperlabs.com.