---
title: "Delete Account"
method: DELETE
path: "/api/users/me"
tags: ["users"]
---

# Delete Account

`DELETE /api/users/me`

## Request

- Base URL: `https://api.stellara.natlex.it` (the document declares no server; this is the origin it was published from)
- URL: `https://api.stellara.natlex.it/api/users/me`
- Auth: HTTP bearer

Permanently delete the current user's account and all associated data.

Rate-limited to 3/hour per IP. Account deletion is the most destructive
action a user can take through the API — this cap blocks accidental
rapid-fire deletes (a leaked JWT could otherwise nuke an account in a
single request) while leaving room for "delete + recreate" support
flows. A leaked JWT is still a problem; a re-auth challenge is the
proper long-term fix (Step 9b in the audit plan).

Before deletion:
1. (iOS) Best-effort revoke of Apple Sign-In OAuth grant — Apple
   Guideline 5.1.1(v). Does NOT block deletion if Apple is down.
2. (Android) Cancel active Google Play subscription. BLOCKS deletion
   on persistent failure — we MUST NOT delete a user account while
   Google Play would keep charging them. iOS subscriptions cannot
   be server-side-cancelled (Apple's design); user must cancel via
   iPhone Settings → Subscriptions. The Apple revoke above also
   does not stop billing — only the user can stop iOS auto-renewal.
3. Send a push notification confirming account deletion.
4. Cascade-delete all user data.

## Response `204`

Successful Response

---

[API](https://skmtc.dev/natlex/apis/stellara-api.md) · [All operations](https://skmtc.dev/natlex/apis/stellara-api/llms.txt) · [OpenAPI document](https://skmtc.dev/natlex/apis/stellara-api/revisions/e576f046b61f?raw)