Data retention and deletion
Version 1.0 · Effective from 16 October 2026 · Last changed 7 November 2026 · About 5 min read- We keep data only for as long as we need it, and then delete it automatically.
- We delete or irreversibly anonymise students' campaign data no later than 60 days after the campaign ends.
- We delete teacher and ambassador accounts after 12 months without a sign-in, or straight away if you ask us to (copies in backups expire within 7 days at the latest).
- All that remains permanently are anonymous summaries from which no specific person can be identified.
1. Principles
Each item of data has a set retention period based on the purpose for which we hold it. When that period expires, we delete the data or irreversibly anonymise it – that is, alter it so that it can no longer be linked to a specific person, even with the help of other information. Deletion happens automatically; the periods below are maximums.
Exceptionally, we may keep data for longer only where we need it to establish, exercise or defend legal claims (e.g. in an ongoing dispute) or where the law requires us to – and only for as long as necessary.
2. Students in a campaign
| Data | How long |
|---|---|
| Game profile (pseudonymous account), nickname, school, year, class | up to 60 days after the campaign ends |
| Game activity, points, competition days, invitation links, confirmation of the rules | up to 60 days after the campaign ends |
| Research survey answers and the options chosen in quizzes, in the temporary store (linked to the profile; the profile keeps only whether a quiz answer was correct and its time) | until the end of the competition day at the latest, then moved without the link |
| Comparison survey answers (the same questions at the start and at the end of the campaign), in the temporary store linked to the profile | until the campaign ends, no longer than 7 days after the answer, then moved without the link |
| Research and quiz answers not linked to any person | permanently, as anonymous data |
| Aggregate results and statistics (groups of at least 10 people) | permanently, as anonymous data |
| Invitation link cookie | 7 days; immediately after joining the campaign |
| Deletion on request in the app (Profile → “Delete my data”) | in the service immediately once the request is approved, within one month of the request at the latest; copies in backups disappear within 7 days at the latest |
The end of a campaign is the last day on which points can be earned in the campaign, according to its rules. For the Velvet Week 2026 campaigns (Pauza na samet / Pauza na Nežnú, ending 13 November 2026), this means deletion or anonymisation by 12 January 2027 at the latest.
The winners' published results (nickname, class, school) remain visible until the same deadline at the latest. After that, the campaign's results archive keeps only the leaderboards and aggregate results of classes and schools with at least 10 players, without individuals' nicknames. Schools and classes with fewer than 10 players are not listed in the archive.
3. E-mail reminder about the next campaign
| Data | How long |
|---|---|
| E-mail address not confirmed via the link | 7 days (then the link expires and we delete the address) |
| Confirmed e-mail address | up to 30 days after the start of the campaign it announces, but no longer than 12 months after confirmation |
| After unsubscribing via the link in an e-mail | deleted immediately in the live service; copies in backups expire within 7 days at the latest |
| Technical key protecting the form against misuse | 1 hour |
4. Teachers
| Data | How long |
|---|---|
| Teacher account (name, school, subjects, e-mail, verification status) and consent records | until the account is deleted, at most 12 months after the last sign-in |
| Reason for rejecting verification and who decided | 30 days after the decision |
| Account deletion at your own request | immediately in the live service, including the sign-in e-mail address; copies in backups expire within 7 days at the latest |
5. Ambassadors
| Data | How long |
|---|---|
| Ambassador account (e-mail, country, school, school-leaving year), link to the game profile, consent records, the ambassador's final aggregate result in each campaign (e.g. the number of classmates who joined, with no data about them) | until the account is deleted, at most 12 months after the last sign-in or after leaving the programme |
| Commitments to put up QR codes | 12 months after the start of the campaign, or when the account is deleted |
| Submitted ideas | separated from the author when the account is deleted, and deleted after a further 12 months |
| One-time code for linking the profile | 24 hours |
| Account deletion at your own request | immediately in the live service, including the sign-in e-mail address; copies in backups expire within 7 days at the latest |
6. The eolin.app website
| Data | How long |
|---|---|
| Visitor statistics (daily totals only, without cookies, IP addresses or identifiers) | 25 months |
| Language and appearance cookies | 1 year, or until deleted in the browser |
| Sign-in cookie | until you sign out or the session expires |
| E-mail address a sign-in code was requested for, where registration was never completed | 30 days after the last sign-in |
7. Operations and security
| Data | How long |
|---|---|
| Audit log of administrators' actions (who published, approved or exported what) | 3 years |
| Administrator account (e-mail, name, permissions, second sign-in factor, sign-in sessions) and records of confirming the Administrator privacy notice | 3 years after the account was last used – after access ends or, if it never ended, after the last sign-in; accounts of administrators with access to the whole platform are not deleted while that access lasts; name and permissions are removed as soon as access ends |
| Hosting providers' operational logs (may contain an IP address) | a few days, depending on the provider's settings |
| Database backups | 7 days – deleted data disappears from the backups no later than 7 days after deletion |
8. Asking for earlier deletion
You can ask for deletion at any time, even before these periods expire. Students ask for it right in the app (Profile → “Delete my data”) – details in the Student privacy notice; for accounts, see the Account privacy notice. Teachers and ambassadors can delete their own accounts in their profile settings.