Data Retention and Privacy Guardrails

[charlieroth]

Why

Minimize stored personal data and support removal on request.

Definition of Done

• Only necessary fields are stored for users and items.
• A command exists to delete a user and all related data.
• A command exists to purge content bodies older than a chosen window for accounts that opt in.
• Documentation states what is stored and for how long.

Tasks

• Review schemas and remove unused fields.
• Implement cascading delete for a user scope.
• Implement optional purge by time window for content bodies.
• Update documentation and add warnings.