Data Retention
Data Retention
Last updated: February 2026
We keep only the data we need to operate the program and meet compliance requirements. Retention periods may vary by data type.
Retention Schedule
| Data | Retention | Why |
|---|---|---|
| Magic link tokens | Up to 30 days after expiry or use | Security and troubleshooting |
| Auth sessions | Until expiration | Authentication |
| Stripe webhook events | Processed/ignored: 180 days; failed: 365 days | Billing/entitlement auditing and troubleshooting |
| Email send logs | 730 days | Idempotency, audits, and deliverability troubleshooting |
| Marketing unsubscribes | Indefinite | Compliance (honor opt-outs) |
Requests (DSAR)
You can request an export or deletion/anonymization of your data by emailing privacy@lennysnewsletter.com. We will verify the request and process it in accordance with applicable requirements.
See also: Privacy Policy.