Data retention policies

CookieHub follows strict data retention practices to ensure compliance with global privacy regulations such as GDPR and CCPA. Our policies are based on the principles of data minimization and storage limitation, meaning data is kept only as long as necessary for legal, compliance, and operational purposes.

Purpose of data retention

CookieHub processes minimal data to provide consent management services. Data is retained only to:

  • Demonstrate user consent: Maintain consent logs for proof of compliance with privacy regulations.
  • Ensure security and reliability: Retain server logs for system monitoring and issue detection.

Consent logs

Consent logs record users’ consent choices, allowing businesses to demonstrate compliance.

  • Default retention period: 12 months.
  • Custom retention: Businesses can adjust the retention period in the CookieHub dashboard to align with internal policies.
  • Deletion: After the defined retention period, consent logs are automatically deleted.

Server logs

Server logs help monitor performance and detect security issues.

  • Retention period: Up to 3 months.
  • Logs are automatically deleted after this period to avoid unnecessary data retention.

Cookie storage

CookieHub uses a cookie named cookiehub to store user consent preferences.

  • Default retention period: 12 months.
  • Custom retention: This can be adjusted in the CookieHub dashboard.

Deletion of stored data

  • Account closure or service cancellation: All stored data, including consent logs, is deleted when a client cancels the service.
  • User requests: CookieHub supports GDPR’s “right to erasure.” Data is deleted upon valid request.

Compliance with privacy laws

These policies ensure compliance with GDPR, CCPA, CPRA, and similar regulations. By limiting storage and providing customization options, CookieHub helps businesses manage user data responsibly.