How to request deletion

1. 1

   Enter the email address on your account in the form below, and tick the confirmation box.

2. 2

   Open the verification email we send to that address. We only email the address itself, so nobody else can start a deletion on your behalf. The link in it is valid for 60 minutes.

3. 3

   Click the link, then press “Delete my account” on the page it opens. Your account is deleted immediately at that point. Nothing is deleted before you press that button.

This cannot be undone. Deleting your account permanently destroys your badges, streaks, Tahoma Tokens and every other piece of your progress. There is no grace period and no way for us to restore it afterwards — which is exactly why we ask you to confirm from your own inbox first.

What is deleted, and what is kept

We would rather be accurate than reassuring. Deleting your account does not erase the reports you contributed — it unlinks them from you. Here is exactly what happens, matching the Privacy Policy.

Permanently deleted

• Your account record. Name, username, email address, password, profile settings and email-verification state.
• Your profile photo. The image file is deleted from our storage, and we check that it actually went. In the rare case a storage failure leaves it behind, we are alerted and remove it by hand — it is never knowingly left in place.
• Your sign-in credentials and API tokens. Your password and every access token issued to your account are revoked, so any device still signed in is signed out of it. The app itself stays registered as an anonymous device — that registration is what keeps your old reports on the map without an owner — but it is no longer signed in to anything.
• All of your gamification history. Badges, badge progress, statistics, streaks, reputation, Tahoma Token balance and ledger, saved locations, report verifications, and leaderboard standing — including the stored badge-earned and rank-change notifications, which carry badge names and dates of their own, and the internal audit entries recording any badge an administrator granted or revoked by hand, which carry the same details. This is irreversible.
• Your in-app activity records. Feature requests you filed, your upvotes and follow subscriptions, the accounts you blocked, and your subscription record if you had one.

Kept, but permanently unlinked from you

• Your reports. The mountain visibility state, the coarse H3 cell and the timestamp stay in the historical community archive indefinitely, because other people’s view of Rainier’s history depends on them. Your name and username are removed, and the reports become anonymous. Deleting your account does not remove a report from the map. That anonymity is permanent: we record that the report once had an author, so even if the device you reported from is later signed in to a different account, your old reports can never be re-attributed — not to you, and not to anyone else.
• Photos you attached to reports. Deleting your account does not delete these. They stay with their reports, no longer attributed to you, for as long as the report does. Whether one stays visible is a separate question decided by photo moderation, before and after deletion alike: a photo that is still awaiting review, or that moderation rejects, is hidden from the public feed, and a rejected photo’s files are deleted outright. So treat this as “kept indefinitely unless moderation removes it”, not as a guarantee of permanent public display. If you need a specific photo taken down, email us before you delete your account, while we can still confirm it is yours.
• Your devices. Device records are kept but unlinked from you, which is what makes the reports above anonymous. Their push token is deleted and every push setting — mountain-out alerts, First Out alerts and the promotional category — is switched off, so all push notifications stop, including promotional ones. Nothing has to be turned off separately. If you keep using the app without an account, it starts from no notification consent at all — your old choices are not carried over, so you would have to turn anything you want back on yourself.
• Support messages you sent us. Kept as support history, redacted: your account link, the name and email address on the message, and the link to the device you sent it from are all removed. What remains is the text you wrote and when you sent it — we keep that because a support thread with the substance stripped out is worthless as history. If your message itself contains something identifying, tell us and we will delete the whole record.
• A moderation suspension on your device, if you had one. If your account was suspended for moderation, the device record keeps that suspension marker — including the internal id of the suspended account — and it keeps applying after the account is gone. This is deliberate: otherwise deleting an account would be a way to lift a suspension. If you were never suspended there is nothing here. Once your account record is deleted the id no longer resolves to a name, a username or an email address.
• App interaction logs. We record coarse in-app events to understand how the app is used — a map drag, a step through the report form, a submission blocked by the profanity filter. Those rows are kept and your account link is removed from them. Events recorded against the device rather than your account stay attached to the device record above, which is anonymous once your account is gone. They hold no name, username or email address.
• Moderation and community records. First Out wins, campaign delivery records and your place in the Pioneer cohort are kept with your account link removed — the cohort slot stays filled so deleting an account cannot promote a later reporter into it. Flags you filed against other people’s content are also kept — a moderation record has to outlive an account, or a pattern of abuse could be erased by deleting one — and those rows still carry the internal id of the account that filed them. Flags other people filed about you are kept on the same grounds. Once your account record is deleted that id no longer resolves to a name, a username or an email address.

Not covered — you need to do this separately

• Newsletter and app-update emails. Our mailing list is stored against your email address rather than your account, so deleting your account does not unsubscribe you. Use the unsubscribe link at the bottom of any email from us, or ask us at [email protected].
• Your details held by our email provider. We send email through Loops, and when you registered we passed them your email address, your first name and your account’s internal id. Deleting your account here does not remove that copy — it lives with them, alongside your subscription, until you unsubscribe or ask us to erase it. Email [email protected] and we will have it deleted. We would rather tell you this than let you assume one deletion covered both.
• If you joined the app waitlist. That signup is stored against your email address too, so it also survives your account. We do clear the parts of it that are not a mailing-list subscription: any comment you wrote when you signed up, the platform you signed up from and whether you volunteered to test. Your email address and the record that you confirmed the subscription are kept — that record is how we can show the subscription was something you asked for.

Timing and retention

• Deletion is immediate. Everything in the “permanently deleted” list above is removed the moment you confirm from the emailed link — well inside the 30 days our Privacy Policy commits to. The one exception is the profile-photo file: we delete it and verify it went, but if our storage fails at that moment the file is removed by hand once we are alerted, so for that single item “immediate” can become “shortly afterwards”. Everything else is gone before the page tells you so.
• Everything in the “kept, but unlinked” list is kept indefinitely. We would rather say that plainly than imply a schedule we do not run. There is no automatic expiry for anonymized reports or their photos, redacted support messages, moderation flags, device suspension markers, app interaction logs, First Out wins, Pioneer cohort slots, or campaign delivery records. Your mailing-list subscription, your redacted waitlist signup and the copy of your details held by our email provider are kept until you unsubscribe or ask us to erase them — they are not on a timer either. Your device record is also kept indefinitely once it has reports attached — unused devices with no history are pruned after a month, but a device that contributed to the archive is not, because the archive depends on it.
• Security event records are kept indefinitely too. Sign-in and account-security events are recorded against the email address, IP address and browser involved rather than against your account, so deleting your account does not remove them and they are not covered by the 14-day log rotation below. We keep them to investigate abuse and account takeovers. Ask us if you need one removed.
• Server logs are rotated after 14 days. A copy of deleted data may also persist briefly in routine database backups until those are rotated and replaced.

Other ways to do this

• In the app or on the web, while signed in. Your account settings have a Delete Account option that does exactly the same thing as this page — it runs the same deletion.
• By email. Write to [email protected] from the address on your account. We respond within 30 days.

Questions before you go? Contact us — we would rather fix a problem than lose you.