Account & data controls
Request account & data deletion.
Ask City of Hats Inc. to delete your account and associated personal data, or request removal of specific data while keeping your account.
Start your deletion request
You can submit a request by email, even if you have uninstalled the app or cannot sign in.
Request account & data deletion privacy@cityofhats.comIf the button does not open your email app, send an email to the address above with the subject “City of Hats account and data deletion request”. No app installation or City of Hats sign-in is required to submit your request.
What to include, and what happens next
- Identify the account. Include your City of Hats username or Hat ID and, if your account uses one, its registered email address. Tell us which account or Hats the request concerns.
- State your request. Say that you want your account and associated personal data deleted, or describe the specific data you want removed. Provide an email address where we can reply.
- Complete ownership verification. We may ask for information needed to verify your identity and authority before processing the request. An inability to sign in does not prevent you from contacting us.
- Receive our response. We generally respond within 30 days, or within the period required by applicable law. We will explain any extension, refusal or data that must be retained.
Keep your secrets private. Do not email your passphrase, password, recovery key, private keys, verification codes or message contents. A username or Hat ID identifies an account; it does not, by itself, prove ownership.
What your request covers
An account-and-data deletion request covers your account and personal data associated with it that City of Hats controls. This can include account and profile information, Hat ownership records, device and session records, push tokens, and associated channel, message, file or feature data held by the service, subject to the retention exceptions below.
Where a service provider processes that data for us, the request also covers relevant provider-held data, subject to applicable obligations. Copies independently held by recipients, records controlled by another organization, and records an app store or payment provider must retain have their own controls and obligations.
Using the in-app account action
The current in-app account action disables access, revokes sign-in sessions and retires associated Hats. Some messages, files, billing records and backups can remain. Use the email request above for review of associated data removal as well.
Subscriptions: review and cancel any recurring subscription through the store or provider that bills you. Account deletion and subscription cancellation are separate actions. You can contact us to start a deletion request or get help with this step without reinstalling the app.
Data removal and retention
Retention follows our privacy policy. After verifying your request, we review the associated information for deletion or de-identification. We may retain information needed for legal obligations, security, fraud prevention or resolving claims.
| Data category | Retention information |
|---|---|
| Account, profile, Hats and associated service data | Reviewed for deletion or de-identification following a verified request. Message and file lifecycles also depend on the feature and its deletion or expiry settings. Information covered by a required retention exception may remain. |
| Payment, tax and transaction records | Kept for the period required by tax, accounting, fraud-prevention and payment-dispute rules. |
| Security, support and legal records | Kept while a request, investigation or claim is active and for a reasonable follow-up or applicable limitation period afterward. |
| Backups | Protected copies are removed through the normal backup rotation. Active-system deletion can happen before backup copies age out. Restored backups remain subject to the same deletion rules. |
These periods depend on the record and applicable obligation. Our response will explain any information we must retain and the applicable retention period. The 30-day response guidance is not a guarantee that every backup or legally required record is erased within 30 days.
Delete specific data while keeping your account
You can use the same contact to request deletion of particular personal data without asking to close the entire account. Identify the data or feature involved and say clearly that you want to keep your account. We will verify the request and explain any effect on the service or retention exceptions.
Request deletion of specific data →