privacy-and-data-retention
Privacy and data retention for a solo maker of software and games - data inventory (what, why, where, how long), data minimisation, lawful basis and consent basics (GDPR, CCPA, COPPA flagged to verify), retention schedules and deletion jobs, user data export and deletion endpoints, PII scrubbing in logs and analytics, third-party processor lists, children's data caution in games, LLM prompt and response data handling, breach response for one person, and deriving the privacy policy from the inventory. Load when collecting a new kind of user data, adding a third-party service or analytics, building account deletion or export, handling LLM inputs, or writing a privacy policy.
Pinned to revision c74eff4a9f08, so it is the text this page describes rather than whatever the author pushed since.
Files
Every link opens the file at its source, pinned to the revision this page describes.