Your data & deletion
Choose the right action for a connection, public content or your platform account.
Version 2026-09-21 · Effective 2026-09-21
Disconnect Instagram
Use the connection controls in your account to stop the connection. This removes usable Instagram credentials. It is not the same as removing every Entry or deleting your platform account. You can also revoke the app’s access in Instagram’s Apps and websites settings. Neither action deletes your actual Instagram account, posts or followers.
Withdraw or remove an Entry
- Before a Round starts, withdrawing an Entry removes it from the scheduled Lineup and cancels its pending notifications.
- After completion, the public-removal option removes the Entry’s public presentation. It does not automatically recalculate the Round or erase all non-public votes, results and audit history. Some period-level recognition may remain where it is based on other eligible participation.
- For wider removal of imported Instagram content or an account-wide privacy request, use the routes below instead of assuming that an Entry action covers everything.
Request Instagram-data deletion
A verified request through Meta or our privacy contact removes stored Instagram credentials and imported profile identity/content, managed profile images and the associated public creator/Entry/Award presentation across our data environments. It also prevents pending messages from continuing to publish that removed identity.
Limited provider-to-platform identity mappings and non-public competition/security records can remain. They may still identify a person; they are not described as anonymous. Their continued retention needs a specific purpose and time limit. Your Firebase/platform account is not automatically deleted by this Instagram-specific action.
If Meta provides a confirmation link, that page shows the processing status of that request. Keep the link private. A completed receipt refers to the Instagram-specific scope, not to a complete erasure of all platform or backup records.
Request account-wide erasure or access
Email hey@creatorspop.com and specify whether you want access, correction, account closure, erasure or another privacy action. Identify the relevant platform account or creator and the scope of your request. Never send passwords, sign-in links or access tokens.
There is currently no self-service account-wide deletion button. We review the request, verify identity proportionately, and explain any data that must be retained and the applicable limits. Under the GDPR, the normal response period is one month, with permitted extensions or exceptions explained where relevant. A request is not rejected merely because the product lacks an automated button.
- Platform-account retention
- We keep account details and the age declaration while the account is active. There is no automatic inactivity-deletion rule. On a verified erasure request, we remove data that is no longer needed and separately assess any records required for an unresolved dispute, security incident or legal obligation. Restricting sign-in is not account erasure.
- Competition / audit retention
- Published Round results and Awards form a continuing competition archive. On verified full account erasure, creator identity is removed from public presentation and account links are detached from retained competition records. Individual outgoing vote records are removed while their valid contribution remains only in unlinked totals; active support relationships are removed. Identifying account and moderation references are removed, subject to a separately assessed exception for an unresolved dispute or legal obligation. Such an exception is limited to that matter and ends when the reason ends. Retained competition records and opaque identifiers are not automatically anonymous.
- Provider-identity retention
- Instagram access credentials are removed on disconnection or verified revocation. Short-lived OAuth attempts expire and are cleaned up hourly. The separate Instagram-to-platform login mapping is retained while it is needed to reconnect the same platform account; disconnecting alone does not remove it. Full account erasure removes that mapping after both environments and managed images are cleared. Minimal account/provider suppression markers prevent old login attempts or recovery copies from restoring erased links. They expire 8 days after the relevant cleanup phase or case completion and are removed by a daily job. Incomplete erasure cases retain the identifiers necessary to finish cleanup and verify external deletion; they are not silently expired.
Stop analytics or request removal of earlier events
Withdraw analytics consent in Cookie settings to stop new collection and clear this browser’s analytics identity. Earlier events are not automatically erased. Before withdrawing, save the analytics reference shown on the settings page if you want us to locate consented anonymous activity; alternatively identify your signed-in platform account in your request.
Backups, recovery and public copies
Removal from live systems does not imply immediate destruction of backup or soft-deleted storage copies. Access to recovery copies must be restricted and previous erasure requests respected during restoration. We cannot remove independent screenshots, downloads or shares from other people’s devices.
- Recovery retention
- The production SQL instance keeps seven daily automated backups and seven days of point-in-time recovery. Deleted managed images have a seven-day Storage soft-delete recovery window. Manual recovery copies, if created for an incident, are reviewed and deleted when that recovery purpose ends. Firebase documents up to 180 days for removal of deleted Authentication data from its live and backup systems. Recovery data is not returned to normal use without reapplying earlier erasure requests.