zest

Delete account

This is a translation for convenience only. The German version of this page is the legally binding one.

Last updated: 4 August 2026

You can delete your shiver account yourself at any time, without giving reasons, without being asked to confirm your motives and without any notice period. This page describes how to do it, what is deleted in the process, what we still have to retain for a certain period for legal reasons, and how to request deletion if you no longer have the app installed.

Deletion in the app

  1. Open the app and sign in.
  2. Go to your own profile and open Settings.
  3. Select Delete account.
  4. Confirm the security prompt.

Once you confirm, the account is deleted server-side immediately. Signing in is no longer possible afterwards because the login credentials no longer exist, this is not a block, it is a deletion. Your content is no longer accessible from that moment on. Deletion runs in cascading fashion across all associated records, which means: the single action is sufficient, you do not have to remove videos and comments individually beforehand. Deleting the app from your device alone does not delete the account.

What is deleted

Not affected are the plain counter values on other people's videos (such as the total number of views). These are numbers without any personal reference; they permit no conclusions about you and would otherwise change retroactively to the detriment of other users.

One point worth knowing. Content that others downloaded, photographed or redistributed outside shiver before the deletion is beyond our control. That also applies to direct messages: the message thread is removed on both sides, but we cannot retrieve a screen recording that has already been made.

What we retain, and why

Data Period Reason
Reports you have submitted about other people's content, including the moderation decision taken, but without any personal reference: the link to your account is removed upon deletion, the record remains in anonymous form indefinitely, as it has no personal reference evidence of a lawful notice and action procedure (Art. 16, 17, 20 DSA); conclusions about you are no longer possible afterwards
Server and security logs (IP address, time, endpoint called) short-term; deleted as soon as the purpose ceases to apply, at the latest in accordance with the specifications of our processor, we have not configured a separate, shorter period there operational security and abuse prevention, Art. 6(1)(f) GDPR in conjunction with Art. 32 GDPR
Content and traffic data that is the subject of an official request for information or preservation for the duration of the order legal obligation, Art. 6(1)(c) GDPR
Records of payment transactions, insofar as any have taken place 6 or 10 years respectively retention obligations under commercial and tax law, § 257 HGB, § 147 AO
Correspondence with support up to 3 years after the end of the matter handling and documentation of enquiries, limitation periods

The records with a personal reference, logs, data preserved at official request, payment records and support correspondence, are used exclusively for the purpose stated in each case and deleted afterwards. We do not set up a technically separate "restriction of processing" (Einschränkung der Verarbeitung) within the meaning of Art. 18 GDPR; the purpose limitation follows from the respective retention ground. The report records in the first row are retained in anonymised form only, that is, without any reference to your person.

A technical block of an account is not provided for in shiver, there is no block flag and no block list. In the event of breaches of the terms of use we can therefore remove individual content or delete the account; merely suspending it for a period of time is not possible.

Deletion timeline

Point in time What happens
immediately account, login credentials and content data are deleted from the production database; signing in is no longer possible, profile, videos and comments are no longer accessible. In the same operation the files are removed from the videos, thumbnails and avatars buckets.
shortly afterwards Should an individual file be left behind in the process, for example because the connection drops at the moment of deletion, it is removed subsequently; the account deletion itself is not held up by this. In this step we also instruct the video service Mux to delete the playback version stored there. That deletion is carried out by the service provider, so we cannot guarantee the exact point in time.
until the backup copies are overwritten The data may still be contained in the rolling backups of the backend provider for technical reasons. Backups are not deleted selectively; they are overwritten on a regular cycle. That cycle follows the specifications of our processor, not a period set by us. According to Supabase's public documentation, backup states are retained for at most seven days; we do not use the add-on for longer retention (Point-in-Time Recovery). After that period at the latest, deleted data has also disappeared from the backups. We do not restore a deleted account from a backup copy.

Restoration is no longer possible after confirmation. If you want to keep your videos, please back them up on your device beforehand.

Deletion without the app installed

If you no longer have the app installed or can no longer sign in, request deletion by email to info@offline-events.de with the subject line "Kontolöschung shiver" (shiver account deletion). Please state:

If possible, send the email from the address stored in the account, then we can verify your authorisation without further enquiries. If that is not possible, we will ask you individual questions about the account in order to establish your identity. Please do not send us copies of identity documents or payment data; we do not request anything of the kind.

We generally confirm receipt within one working day and carry out the deletion within 30 days at the latest after the identity check. You will then receive a confirmation by email. The request is free of charge.

Your rights

The right to erasure follows from Art. 17 GDPR. In addition, you have the right of access (Art. 15 GDPR), rectification (Art. 16 GDPR), restriction of processing (Art. 18 GDPR) and data portability (Art. 20 GDPR), if you would like a copy of your data before deletion, please request it before you delete the account.

You can also lodge a complaint with a data protection supervisory authority. The authority responsible for us is the Bayerisches Landesamt für Datenschutzaufsicht (BayLDA), Promenade 18, 91522 Ansbach, Germany.

Questions about deletion are answered by Support. Which data we process in the first place is set out in the privacy policy.