Skip to main content

Deleting your account

How the 30-day grace window works and what happens to your data.

How to request deletion

  1. Sign in.
  2. Go to /me, scroll to the Danger zone, and click "Delete my account."
  3. Type the confirmation word into the prompt.
  4. Submit.

Your account is now scheduled for deletion — not yet deleted.

What happens immediately

  • Your bot is stopped.
  • All your active sessions are signed out.
  • A red banner appears on your /me page showing the scheduled deletion date.
  • We email you a confirmation with the date + a "Cancel deletion" link.

The 30-day grace window

Account deletion is delayed by 30 days. During that window:

  • You can sign in (your password still works).
  • You can cancel the deletion from /me (click "Cancel deletion" on the banner).
  • Your bot stays stopped.
  • Your data is unchanged on our side.

Why 30 days? Compromise-recovery + cooling-off. If an attacker ever did manage to delete your account, you'd have 30 days to notice + cancel. We also let you change your mind without losing data.

What gets deleted after the grace window

At the end of the 30 days, a daily job (vf-deletion-runner) hard- deletes:

  • Your user row (cascade deletes sessions, audit log, notifications, bot row, etc.).
  • Your encrypted Kraken keys (overwrite + delete).
  • Your bot home directory (archived first to /srv/volatilityfarmer/deleted// for 30 days as a safety net, then purged by a separate cleanup).
  • Your config.json + state.json + events.jsonl.

What stays

  • Anonymized audit-log entries with no actor_user_id reference.
  • Aggregate analytics counters.
  • Stripe customer records (we don't have the authority to delete those — contact Stripe directly if you want them removed).

Your Kraken account is unaffected

We can't delete your Kraken account; only Kraken can. If you also want to close your Kraken account, do that separately via Kraken's support. We strongly recommend:

  1. Delete the API key on Kraken's side before / right after deleting your VF account.
  2. Manually close any open positions before deletion (the bot's existing sell orders stay on Kraken indefinitely otherwise).

GDPR Article 15: data export first

If you want a copy of your data before deletion, use the GDPR data export at /me/data-export. See Downloading your data.