The fastest path is the in-app self-service delete:

1. Sign in.
2. Open Account Settings and switch to the Danger zone tab.
3. Type DELETE in the confirmation box to enable the delete button.
4. Confirm. You're signed out as soon as it completes.

What gets deleted: your profile, sign-in identities, addresses, cart, watchlist, master-set / Pokédex tracking, hunt code redemptions, store-credit balance, and any drafts you have open. The email tied to your account is released so you could sign up again later if you change your mind.

Philippine tax and accounting law obliges us to retain certain records even when you delete the account they belong to. These records are scrubbed of direct identifiers where possible and held only as long as the law requires:

• Transaction records (orders, invoices, payouts, payment intents) — 7 years from creation, per BIR recordkeeping rules.
• Dispute resolutions until the dispute is closed, plus the same 7-year retention on the underlying transaction.
• Fraud / abuse signals tied to an account we suspended or banned — kept while necessary to enforce the ban (typically up to 5 years).
• Server logs — 90 days; nothing personal is retained past that.

Everything else is deleted. See the Privacy Policy for the full retention table.

If you have active orders — you're a buyer awaiting delivery, or a seller with paid orders to ship — the self-service delete is blocked until those orders reach a terminal state (delivered, released, refunded, or cancelled). This protects your counterparty. Close out the open transactions first, then retry the deletion.

Under the Philippine Data Privacy Act (RA 10173), you have the right to access the personal information we hold about you. To request an export, email privacy@packsilogan.com from the email address tied to your account, with the subject “Data export request”. We respond within 30 days with a structured JSON / CSV bundle covering:

• Profile + sign-in identities + addresses
• Orders, bids, watchlist, cart, invoice line items
• Reviews you've given or received
• Order-thread messages you participated in
• Tournament registrations + match history
• Master-set / Pokédex tracking + collector slots
• Hunt redemption + store-credit ledger

We don't include other users' personal data (e.g. the counterparty's email or address). For payment-processor records, request those directly from PayMongo.

The same email handles every other DPA right:

• Correction — ask us to fix inaccurate data we hold about you.
• Objection — restrict processing for particular purposes (e.g. opt out of marketing emails — we don't currently send marketing, but the right is yours to enforce if we ever did).
• Portability — receive your data in a machine-readable format, same as the export above.
• Withdrawal of consent — revoke any permission you previously gave; we explain what stops working and what we still need to keep.
• Complaint — you can complain to the National Privacy Commission (NPC) at privacy.gov.ph if you believe we've mishandled your data.

For email-based requests:

• Day 0 — we acknowledge receipt within 1 business day. If we need to verify your identity (e.g. you emailed from a different address), we ask for confirmation here.
• Day 1–7 — we run the export / correction / deletion against our systems and our sub-processors' records (Supabase, Resend, Sentry, Cloudflare).
• Within 30 days — we confirm in writing what was done, with the retention exceptions called out per Section 2 above.

Self-service account deletion via the Danger zone happens immediately for everything we control directly. Backups expire and are overwritten on a rolling 35-day cycle.

Send all Data Privacy Act requests to:

Email: privacy@packsilogan.com
Response time: initial acknowledgement within 1 business day; full completion within 30 days.

For non-privacy questions, use contact us.