We should support self-service account deletion so that users have control over their data retention. Limiting factors:
In general, user-generated content should be anonymized rather than deleted. However, user profile data should be removed
I think we should have a short waiting period, say 7 days, before removing accounts, so that there is a short window it can be reversed
If we have a waiting period, we should have an external system recording account deletion requests in a semi-anonymized way (eg via UIDs) so that in case we have to restore a backup in a disaster recovery situation, we can ensure the accounts are still deleted as requested
We should support self-service account deletion so that users have control over their data retention. Limiting factors: