Account & Data Deletion

There are two ways to delete your Stublet account and your personal data:

Recommended path - in-app (immediate):

• Open the app and sign in
• Go to "Settings" > "Account" > "Delete account"
• Confirm. Deletion runs immediately, and the personal data on your Stublet account cannot be restored. You can sign up again later with the same phone number or email, but that starts the account afresh - your listings, saved items, and profile details do not come back

Email path - for users who can't sign in:

• Email [email protected]
• Subject: "Account deletion request"
• Include the phone number or email associated with the account, plus a brief detail that helps verify you're the account owner
• We respond within 30 days, as required by Israel's Protection of Privacy Law, 5741-1981

Account deletion runs the following operations on our servers (a soft delete):

On your user record:

• Name, phone number, email address, and profile photo are nulled
• A deletedAt marker with the deletion timestamp is added
• All push notification tokens (FCM) are removed
• All your Firebase refresh tokens are revoked - every active session is terminated immediately

On your listings:

• Every listing you posted moves to inactive (isActive = false) and leaves the public feed
• Your name and photo as the listing's host are nulled, so the listing won't expose you even if an internal user finds it in archives

In the social graph (stored in MongoDB):

• Your follow connections are deleted in both directions - the people you followed and the people who followed you
• The blocks you placed on other users are deleted
• Your contact key (the matching code of your own phone number that lets friends find you through their contacts) is deleted
• Your saved contact list, including its entries in the matching index, is deleted
• Host questions you asked or were asked, your "People you may know" suggestions and dismissals, and contact-join records are deleted in both directions
• Invite and share links you sent or opened are deleted
• Blocks that other users placed on you are kept, so that if you register again, their block still stands
• People who followed you no longer see you in their followers list

For other data:

• Saved listings - deleted
• Notification history - soft-deleted
• Interactions (views, likes, seen flags) - deleted
• Reports you filed about other users - deleted
• Your profile photos and listing photos in Cloudflare R2 storage - deleted from storage

Deleting an account does not erase every trace of you. Some data is kept for legitimate reasons:

• Booking requests you sent or received may be kept with internal account references and booking facts, while your profile fields are anonymized - so the other party in the deal retains a record of what was agreed
• Reports filed against you (not by you) are kept for safety, ban-evasion prevention, and to handle later appeals
• Messages you sent in the chat are soft-deleted on your side, but the other party in the conversation still sees the conversation history on their side - Stublet does not delete content from a third party without their consent
• Aggregate analytics events that don't identify you personally (e.g. "listing viewed") are kept to improve the service
• The contacts access log (internal account identifier, kind of action, count, success and time, with no phone numbers, matching codes, names or IP addresses) is kept for 24 months to detect abuse, including after account deletion
• A number removed on the number-removal page stays on the block list as a matching code, so it is not added again
• Data subject to an active legal hold, if one applies

We do NOT keep financial data on you, because Stublet does not process payments and we have no tax records tied to you.

Stublet uses third-party providers that have their own retention windows. We can't control theirs, but here's the picture:

• Firebase Authentication: all of your refresh tokens are revoked immediately and every active session ends - the account stops being usable at that moment. The underlying identity record at Firebase (the one holding the phone number or email address you signed in with) is not erased: it is retained so we can restore access if the account was deleted by mistake and you re-register with the same number. No automatic process erases that record afterwards - erasure of it is performed manually, on request. If you want the identity record erased, email us at [email protected] and we'll do it
• Firebase Cloud Messaging: your token is removed. Push notifications already sent to your device sit there until you delete them
• Firebase Analytics, Crashlytics, Sentry and PostHog: retain data according to the configured project and vendor retention settings. We request deletion where the provider supports it; data may remain in provider systems until their documented retention period
• PostHog: account deletion triggers a deletion request for the account-linked person record and events where supported. Session Replay is currently disabled
• Cloudflare R2: we request deletion of account media; provider backups and replicas may persist for the provider's documented backup period

If you want to request deletion directly from a provider, the full list of the providers we use is on the "Privacy Policy" page, under "Who we share it with".

If you signed up to Stublet via Facebook, deleting your Stublet account removes our link to your Facebook account on our server side, but doesn't change anything on Facebook's side.

To make sure Facebook also forgets the permissions you granted to Stublet:

• Facebook on desktop: log in → Settings & privacy → Settings → Apps and websites
• Facebook on mobile: menu (☰) → Settings & privacy → Settings → Apps and websites
• Find "Stublet" in the list and tap "Remove"
• Facebook will ask if you want to remove your Stublet activity that was tied to Facebook - confirm

In-app path: the deletion request is recorded immediately and cleanup proceeds asynchronously. Some database records, provider copies, backups, or a conversation copy held by another participant may remain while the applicable retention or legal-hold rules apply.

Email path: up to 30 days from receipt of your request (the legal window). In practice we move as fast as we can - typically 1–3 business days.

After deletion starts, identifying fields are cleared as each cleanup step succeeds. If a step fails, a subsequent deletion retry can continue the idempotent cleanup; until completion, a limited record may remain. Backups and provider copies follow their documented retention periods.

Question before deleting? Issue during deletion? Reach out:

Email: [email protected]

Under Israel's Protection of Privacy Law, 5741-1981, you also have the right to contact the Privacy Protection Authority at the Ministry of Justice (22 Kanfei Nesharim St., Jerusalem) if you're not satisfied with how we handled your deletion request.