Retention & analytics
During the Ohio beta, account records remain until you delete the account. Account deletion removes saved plots, field logs, field outcomes, mobile tokens, and pairing records; active subscriptions must be canceled first. If you participated in the signed Ohio field pilot, the session records and receipts you submitted are part of a tamper-evident evidence chain that published results depend on, so deleting those records is completed by a RelicPlot coordinator: your account row, saved content, and mobile pairing are erased, and the retained pilot record is rebound to an anonymous subject that no longer identifies you. The pseudonymous participant id and the payload inside your signed receipt remain, because rewriting them would break the anchored chain. Expired pairing codes and diagnostic reports are automatically cleaned up, and diagnostic reports are retained for no more than 30 days. Mobile sync tokens expire after 90 days and are never stored in plaintext.
RelicPlot does not run advertising analytics in the beta. The only operational diagnostic record is a bounded, hashed error fingerprint with a support reference, app surface, and app version. It does not include precise locations, notes, photos, field history, raw stack traces, or account identity. We will publish any analytics provider and consent choices before enabling paid traffic or product analytics.