---
title: "Delete the user's account (GDPR/CCPA/LGPD)"
method: POST
path: "/api/passport/account/delete"
tags: ["Session"]
---

# Delete the user's account (GDPR/CCPA/LGPD)

`POST /api/passport/account/delete`

## Request

- Base URL: `https://passport.me`
- URL: `https://passport.me/api/passport/account/delete`
- Auth: API key in cookie `passport_session`

Requires `confirmEmail` body field to match the connected Google email.

## Request body

- object
  - `confirmEmail` string, email, required

## Response `200`

Deleted

## Other responses

- `400`: Invalid request payload.
- `401`: Missing or invalid session cookie.
- `403`: Forbidden (CSRF / origin mismatch / rate-limited).
- `405`: Method not allowed.

---

[API](https://skmtc.dev/passport-me/apis/passport-me-api.md) · [All operations](https://skmtc.dev/passport-me/apis/passport-me-api/llms.txt) · [OpenAPI document](https://skmtc.dev/passport-me/apis/passport-me-api/revisions/c0081754a2dc?raw)