Last updated: 30th April 2026
Stamplo keeps data only for as long as it's genuinely needed. The table below explains what we keep, how long we keep it, and why — in plain language.
You can delete your account and all associated data at any time from your dashboard. If you have any questions, contact us at support@stamplo.kids.
| Data | Kept for | Why | How it's deleted |
|---|---|---|---|
| Parent account | Until you delete it | Running your account and pen pal service | Within 30 days of deletion request |
| Child profiles | While your parent account is active | Running the pen pal service for your child | Deleted when parent account is deleted |
| Letters and images | 12 months from the date written | Pen pal service delivery and parental review | Automatically deleted after 12 months. We notify you 30 days before so you can save anything you'd like to keep. |
| Pending pen pal requests | 14 days if unanswered | Platform integrity and child experience | Automatically withdrawn after 14 days. Both families are notified. |
| Email-unverified accounts | 14 days | Data minimisation — accounts that were never confirmed | Reminder emails sent at day 3 and day 7. Account deleted at day 14 if not verified. |
| Identity-unverified accounts (dormant) | 90 days | Data minimisation — accounts where verification was never completed and no letters were exchanged | Warning emails at day 60 and day 75. Account deleted after day 90. |
| Identity verification records | 12 months after account deletion | Fraud prevention and safeguarding audit | Automatically deleted 12 months after the verification was completed. The underlying ID documents are deleted by our verification provider immediately after each check. |
| Login sessions | 30 days after expiry (parents) · 7 days (children) | Security | Automatically expired and cleared |
| Audit and safety records | As long as necessary | Safeguarding and regulatory accountability | Reviewed annually. Personal identifiers are removed when the related account is deleted; event records are retained for safeguarding purposes. |
| Infrastructure backups | Up to 30 days after deletion | Disaster recovery | Removed automatically as backup rotation cycles complete. |
We will update this page if retention periods change. Material changes will be communicated to registered families by email before they take effect.
Contact us at support@stamplo.kids or view our full Privacy Policy.