Export or erase a viewer (GDPR / CCPA)

A data subject request should take minutes: one button exports everything held on a viewer, one erases them with a typed confirmation.

Someone your client shared a link with writes: "what do you have on me, and delete it." Both halves are two clicks, and both live where the data lives.

Export everything

Open the viewer in the Data Explorer and click Export data (JSON). The download is the complete record HoldFast holds on that person: identity, devices, sessions, events, and scores, in one machine-readable file suitable for handing to the requester.

Erase the viewer

Click Erase viewer and type the confirmation. The erase deletes their identity, devices, sessions, scores, engagement baselines, and referral records, and anonymizes their view events: the events keep an organization domain so your aggregate counts stay truthful, but nothing connects them to a person anymore. Stories about that viewer in the intelligence feed are withdrawn.

Erases are immediate and irreversible, which is why the confirmation is typed rather than clicked. Export first if in doubt.

The retention you get without asking

Deletion requests are the exception; expiry is the rule. HoldFast ages data out on its own: raw IP addresses are dropped after 90 days, device fingerprints are cleared from dormant devices after a year, and live-presence data lives only minutes. What viewers are told and how consent is handled is on the consent page; the reviewer-facing version is what gets tracked.