User Data Deletion

This page describes how Shorterit users can request account and personal data deletion. It is provided as our official data deletion instructions URL for integrations with Facebook, Google, and Microsoft.

Facebook Google Microsoft

1. Submit a Deletion Request

You can request deletion in either of the following ways:

  1. Inside your account: Sign in to app.shorterit.com, go to your account settings, and submit account deletion.
  2. By email: Send your request to [email protected] with subject "User Data Deletion Request".

2. Information to Include

To process your request safely, include:

  • Your account email address.
  • Authentication provider used (Shorterit, Facebook, Google, or Microsoft).
  • Your user identifier if available (for example account ID).
  • Confirmation that you want account and personal data deleted.

3. Revoke Social Sign-In Access

If you signed in with Facebook, Google, or Microsoft, you can also revoke Shorterit from your provider account settings:

4. What We Delete

Data Category Deletion Action Timing
Account profile and login mappings Removed from active systems Within 30 days of verified request
Short links and related metadata Deleted or anonymized from user ownership Within 30 days
Analytics linked to your account Deleted or de-identified where technically required Within 30 days
Backups and operational logs Removed during backup rotation lifecycle Up to 90 days

5. Retention Exceptions

We may retain limited records where legally required, for fraud prevention, security investigations, or tax/accounting obligations. These retained records are restricted and kept only for the required period.

6. Confirmation and Status

After we verify your request, we send a confirmation email. If needed, we may ask for additional verification before completing deletion.

Standard completion target: 30 days from successful identity verification.

7. Contact for Data Deletion Requests

Email: [email protected]

Privacy policy: shorterit.com/privacy-policy.html

8. Meta User Data Deletion Request FAQs

Q: Why did I receive this notice? Is this email spam?

A: This is not a spam email. You received this notice because a user of your app requested that their data be deleted. Please take action by promptly deleting all associated user data in your records for the requested ID. User data deletion requests are captured under applicable privacy laws, so Meta expects that you will handle this matter promptly.

Q: How often can I expect to receive this notice?

A: Every 21 days, you will receive an alert including the user identifiers you are required to delete (which you can download in your app advanced settings page).

Q: How do I access the list of IDs that need to be deleted?

A: You can access these in the advanced settings page of your app dashboard, under "User Data Deletion Requests".

Q: These user ids are not present in our records. What do we do?

A: You can disregard user IDs that do not currently appear in your database.

Q: Who are the users requesting these deletions?

A: These users have requested that their data be deleted. You will find current user IDs in the list that you can download from your developer dashboard.

Q: If I don't delete the data, is my app at risk of deletion or deactivation?

A: Nonaction will not result in deactivation; however, we do require developers to promptly delete user data upon the request of a user.

Q: How long do I have before I have to take action?

A: We ask that you take action in deleting these user IDs promptly.

Q: Do I have to submit proof of deletion?

A: No, you do not have to submit proof of deletion.

Q: What is an app scoped user ID?

A: An app-scoped user ID (ASID) is a unique ID that Facebook creates for a user when they log into a Facebook app for the first time or with Limited Login. ASIDs are specific to the app and cannot be used by other apps.

Q: What is a page scoped user ID?

A: A Page-scoped User ID (PSID) is a unique ID that Facebook assigns to a user when they interact with a Facebook Page through Messenger.

Q: What is an instant game player ID?

A: ID issued by the Instant Game SDK for each user as the unique identifier. Note that Instant Game Player ID and ASID are different even for the same user of the same app.

Q: What should I do if I don't see user identifiers available to download on the app advanced settings page.

A: Please ensure you are an admin or developer of the app, and go to the app advanced settings page. Look for the "Download User Identifiers" card, and you should see a list of user identifiers for the last 60 days.

Q: The file attachment name does not match up with the notification date. What should I do?

A: Please download and take action on all available files.

Q: Is implementing the Data Deletion Callback URL still required if the dev is able to point the user to a help page that provides deletion instructions for their account?

A: Developers need to specify either a data deletion callback instruction URL or a callback URL found in Basic Settings for your app.

Q: How long do I have to download the file of user IDs before the file expires?

A: The file will expire in 60 days.