GDPR fun

Define:data.

Because the content you've granted a permanent publishing right over.

And the only data I hold that isn't content is the email. And it is permitted to keep some records for a system to be functional and to implement things like fraud / spam / impersonation systems. So I can keep email indefinitely for those purposes.

The email is the only data that is really in question, and if I delete it I deprive you of the ability to access your content in the future, and I break the ability to perform spam detection, etc.

You can request for your account to be deleted, and that process remains unchanged... I hard delete your profile and associate the content already granted right to publish to the @deleted profile and it will forever by visible but uneditable and unassociated with an identity.

Your email address only truly gets deleted if the account you have asked to be deleted is the last such account on any forum on the Microcosm platform. So if you are on LFGSS and Brixton Cycles... and ask for deletion from LFGSS, then I as the owner of the platform still have your email. This is much like private message deletion... only when all parties to the message have deleted is it truly deleted from the servers.

The only exception to that is if I've banned you. Bans permanently store an email and are permitted to do so as again they are exempt from the parts of the GDPR that you can request deletion for... as the GDPR does permit companies and entities to store data indefinitely providing there is a purpose behind it, a justified reason to do so.

It seems to me that you need to read up on the GDPR because it isn't carte blanche to request anything and demand deletion of everything. It's that for everything beyond what is needed for a service to be provided... and by that, not just provided to you but provided to others too.