GDPR compliance and data retention

Export, anonymize, and delete user data to comply with GDPR and privacy regulations.

FluxyChat stores user data in Cloudflare D1 (messages, reactions, room memberships) and R2 (attachments, voice messages, AI-generated images). To comply with GDPR, you must be able to export, anonymize, and delete user data on request.

Data export

GET /users/:userId/export — returns all user data as JSON
Includes messages, reactions, room memberships, and file metadata
Attachments can be downloaded via their R2 URLs
Export is rate-limited to once per 24 hours per user

const res = await fetch(`/users/${userId}/export`, {
  headers: { Authorization: `Bearer ${token}` },
});
const data = await res.json();

Right to be forgotten

DELETE /users/:userId permanently deletes all user data. This operation is irreversible:

Soft-deletes all messages (content replaced, deleted_at set)
Hard-deletes all reactions and read receipts
Removes user from all room memberships
Deletes user's attachments from R2
Anonymizes the user record (name, avatar, metadata cleared)
Preserves audit trail (user_id retained for compliance, but no PII)

Data retention policies

Configure retention via the dashboard or API:

Set message_expires_at on individual messages for ephemeral chats
Use AUTO_ROOM_SUMMARY_ENABLED to summarize old messages (reduces storage)
Run scheduled cleanup via cron: DELETE FROM messages WHERE deleted_at IS NOT NULL AND deleted_at < datetime('now', '-30 days')
R2 objects can be configured with lifecycle rules for auto-expiration

Audit trail

FluxyChat logs all admin actions (user deletion, key rotation, config changes) with timestamps and actor IDs. Access audit logs via GET /admin/audit-log.