Erase the caller’s account (GDPR right-to-erasure)

Session-scoped, OWNER-only, irreversible. Anonymizes all personal data (user + customer email/name) and deletes every credential (API keys, sessions, tokens, webhooks); Stripe subscriptions are canceled. Accounting records (usage/billing) are RETAINED under the legal-obligation exemption. Requires a typed confirmation: the body must echo the caller’s own account email. Clears the session on success.

post/v1/me/erase

Request

  • Base URL: https://api.grundfast.dk
  • URL: https://api.grundfast.dk/v1/me/erase
  • Auth: API key in cookie gf_session

Request body

confirmstring required

The caller’s own account email, to confirm intent.

Response

Erased (or already erased — idempotent)

Changes

No recorded changes to this operation across all 1 revision of this API.