After you close your account

Deactivation is immediate and permanent from your side.

• You are signed out everywhere. Every session on your account is ended, including the one you used to close it.
• Every token is revoked. Sessions, refresh tokens and personal access tokens stop working. Apps you had allowed are told that your sessions ended.
• You cannot sign in again. The account is deactivated.
• You are emailed. A security alert goes to your verified addresses saying your account was deactivated at your request.
• The close is recorded. Closing appears in the history of your account as Account deactivated.

Your personal data is still held for 30 days. Nothing is deleted at the moment of closing. The account is deactivated, so you cannot sign in to look at it, export it or use it.

During this time:

• You cannot export your data. Exports need you to be signed in. This is why the close page asks you to export first.
• Your apps cannot sign you in. Any application that relied on this account can no longer sign you in with it.
• The account page cannot reverse the close. The page states that deactivation cannot be undone from there.

Retention and deletion lists the things that are kept for the 30 days, such as the bindings and grants of a deactivated account, which are revoked at the end of the period.

At least 30 days after you closed, a scheduled erasure run erases the account. It is a background run, so it does not happen at an exact moment, and it can run up to about a day later than the 30 days.

Some records are kept because they cannot be edited after the fact, or because other records still refer to them. Retention and deletion lists each one. In summary:

• the audit log keeps events as account identifiers, event types and times, with hashes and short masks in place of addresses;
• technical records that link tokens and app sessions to your account are kept as identifiers, scopes and times until their own retention ends;
• the address an invitation was sent to is kept with the invitation record;
• some fields of past sessions are kept until the session record itself is deleted;
• your account's subject identifier is kept.

The page Retention and deletion says plainly that this is not total erasure, and that backups are not edited.

• Closing your account
• Exporting your data
• Retention and deletion