Data retention

Last updated: August 10, 2026

We keep data only for as long as it is needed. The table below lists the categories of data processed in CookieHug together with their retention periods.

Data	Period	Notes
Raw consent records (`consent_events`)	90 days	cleaned up automatically every night; export available for the entire period
Aggregated consent statistics	indefinitely	contain no personal data
API request log	30 days
Page integrity monitoring snapshots	60 days
SDK diagnostic reports (debug mode)	90 days
Public /scan scanner results	90 days	include the requester’s IP and the optional report e-mail address
Login attempt logs	90 days
2FA verification codes	24 hours
Account data	until account deletion	deletion on request within 30 days
Billing documents (invoices, transactions)	5 years	statutory obligation

After the cooperation ends

Deleting the account and domains removes the associated consent records. Accounting documents remain for the period required by law.