RunicGateway/runicgateway.com
3
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

docs(site): /privacy tells the truth about engagement retention again #29

Merged
whitlocktech merged 1 commits from docs/engagement-retention into main 2026-09-01 20:57:28 +00:00
Conversation 0 Commits 1 Files Changed 1 +14 -7
1 changed files with 14 additions and 7 deletions
Download Patch File Download Diff File Expand all files Collapse all files

21
src/data/collection.mjs
View File

@@ -452,17 +452,24 @@ export const collected = [
'operator can see what was suppressed without the list becoming a second address ' + 'operator can see what was suppressed without the list becoming a second address ' +
'book.', 'book.',
retention: { retention: {
summary: 'Kept until the operator removes them; nothing here expires on its own', summary:
'The delivery log is kept for a period the operator sets (180 days by default) and then ' +
'swept; the suppression list does not expire',
detail: detail:
'Stated plainly because it is the answer people assume the other way round: ' + 'A nightly sweep removes delivery-log entries, finished items from the send queue and the ' +
'the delivery log, the suppression list and the per-person rate limits have no ' + 'per-person rate-limit rows once they pass the horizon the operator has set for each — ' +
'retention sweep, so they are as long as the site is old. Deleting an account ' + 'the defaults are 180 days for the log and 30 for the other two. Two things deliberately ' +
'detaches its rows from it rather than deleting them — a delivery history stops ' + 'do not expire. An item still waiting to be sent is never swept however old it is, ' +
'naming a person, and a suppressed address stays suppressed.', 'because it is a message the site still intends to deliver. And the suppression list is ' +
'permanent by design: it records a standing decision to stop mailing an address, and ' +
'ageing an entry out would mean mailing an address that already bounced or asked to be ' +
'left alone. An operator can remove an entry from it deliberately, one at a time. ' +
'Deleting an account detaches its rows from it rather than deleting them — a delivery ' +
'history stops naming a person, and a suppressed address stays suppressed.',
}, },
source: source:
'website server/db/schema.sql — engagement_sends, engagement_suppressions, ' + 'website server/db/schema.sql — engagement_sends, engagement_suppressions, ' +
'notification_channel_prefs', 'notification_channel_prefs; server/src/utils/engagementRetentionPrune.js',
}, },
{ {
id: 'deploy-game-data', id: 'deploy-game-data',