Deleting your account

Account deletion in Loadout is a 30-day grace period, not an immediate purge. You ask to delete, your account is marked for deletion, you stop being able to sign in. After 30 days the daily cron hard-purges everything.

You can cancel during the grace period with one click.

How to start

1. Account settings → Delete account at the bottom.
2. Re-enter your password (re-auth for sensitive action).
3. Confirm.

A confirmation email lands in your inbox with a Cancel deletion link. The 30-day clock starts ticking.

Your sessions are immediately invalidated — you're signed out everywhere, can't sign back in. The account is in a "pending deletion" state.

Cancelling

Click the cancel link in the email any time before the 30 days are up. The account is restored — your sessions are not (you'll need to sign in again), but everything else (bands, songs, setlists, tips history) is intact.

Cancel link works once per deletion request.

What gets deleted on purge

After 30 days:

• Your user row, your sessions, your linked OAuth accounts
• Your membership rows on every band you were in
• If you were the only member of a band, the band itself (and all its songs, setlists, gigs, tips records)
• If you were the owner of a band with other members, ownership transfers to the oldest admin (or oldest member if no admin)
• Any audit log entries about you get anonymized (your actorUserId is nulled, the rest of the row stays for compliance)

What survives

• Other bands' data that you contributed to — songs you added, setlists you built, ratings you gave — stays. They're band-owned, not user-owned. (Your name comes off them.)
• Audit-log entries anonymized but preserved (with your actor id nulled).
• Tip transactions — for Stripe-side compliance, tip records are kept indefinitely (your fan-side card details were never on Loadout's side; only the band-side connected-account record).

What the cron does

workers/account-purge.ts runs daily at 03:00 UTC. It picks up every account_deletion_request whose scheduled_for has passed and processes the purge in a transaction:

1. Delete sessions and linked accounts
2. Update other bands (ownership transfers, member removal)
3. Anonymize audit-log
4. Delete the user row
5. Mark the deletion-request as purged

If anything fails, the transaction rolls back and the cron retries next day.

Heads up: GDPR-style "I want my data right now" requests bypass the grace period and require manual admin processing. Contact support if that's what you need.

What's next

• Privacy — what Loadout stores in the first place.
• Account settings — sign out everywhere if you're considering deletion.