WipeAway stores as little data as possible. Here is the complete, honest list of what is retained after a session.
What is stored
- Your Google account email address — stored in a private Google Sheet accessible only to WipeAway's operators. Used solely to validate your licence key and prevent key sharing.
- Your licence key and its status — stored in the same Sheet. Includes the key itself, the tier (Individual/Small Business/Organisation), the status (active/expired), and the activation date.
- Standard server logs — Vercel (WipeAway's hosting provider) maintains standard server logs as part of their infrastructure. These logs may include request timestamps, IP addresses, and HTTP response codes. They are retained per Vercel's standard data retention policy.
What is not stored
- Calendar event titles, descriptions, notes, or content of any kind
- A list of your calendars or calendar names
- How many events were deleted or when
- Your Google password (never received — see Do you store my Google password?)
- OAuth tokens — these are stored in a short-lived browser cookie that expires after 24 hours and are never written to any server-side database
Third-party services
WipeAway uses the following third-party services, each of which may retain data per their own policies:
- Stripe — processes payments and retains transaction records as required by law
- Resend — sends transactional emails (licence keys, follow-up emails) and retains send logs
- Vercel — hosts the application and retains server logs
- Upstash Redis — used temporarily for job state during deletions; data is discarded after the job completes