Pads not automatically removed right after user deletion

muppeth

I would like to ask about user deletion process. It looks like when user removes his account, the pads are still available. Does it mean pads become inactive and will be evicted when inactiveTime value passes or when are archiveRetentionTime. I would assume that account data is removed right away when user removes his account but that does not seem to be the case.

Could anyone give some clarity on this? Much apreciated

Mathilde

muppeth hello,

You are right indeed, accounts, just like documents, are archived for X days before being fully deleted. Running the evict-archived.js script will get rid of them.

Please see our official documentation mentioning this in the administrator guide: https://docs.cryptpad.org/en/admin_guide/installation.html#configuration

muppeth

Thanks for clarification @Mathilde
That makes things a bit weird I think. As a user I would assume the moment i remove account, all my data is purged that very moment. I think there is a difference between user deleting a pad and user removing account. Putting both cases as the same, could render situation where user is surprised he can access his pads still even though the account has been removed.

Mathilde

muppeth thanks for your reply!

I definitely understand that might feel strange for a user. We should probably look into a way of archiving the owned pads at the same time as the user delete their account. I'll open a bug report to track this.

Mathilde

It's open here: https://github.com/cryptpad/cryptpad/issues/1590

In the meantime, a workaround is possible by going to your Security & Privacy settings and use the Destroy all owned documents prior deleting your account:

Destroy all owned documents
All documents where you are the sole owner will be permanently destroyed

I understand it's not fully satisfactory but it's what's in place today.

muppeth

Thanks a lot for clarification!