Short-lived by design

Data Retention and Deletion

Retention policy update — effective October 8, 2026 at 22:00 UTC. Individual requests older than 15 days will be deleted, even in active buckets, including requests already stored. The existing 15-day bucket inactivity rule and per-bucket ceilings of 10,000 requests or 50 MiB remain unchanged. Cleanup is periodic, not deletion at an exact second.

Updated October 1, 2026

01

Individual requests: 15-day age limit

The announced policy applies to every capture, whether stored before or after the effective date. Each request has its own age, measured from when it was captured. A new request does not reset the age of older requests.

This request-age rule is separate from bucket inactivity: continued use of an endpoint will not preserve its older captures. Save any test evidence you need beforehand. This announcement does not confirm that backend cleanup has been activated.

02

Unchanged: 15 days of bucket inactivity

The production default deletes a bucket after 15 days without activity when scheduled cleanup is enabled. A captured request updates the bucket’s last-activity time. Cleanup runs periodically, so deletion occurs after the threshold rather than at an exact second.

Deleting a bucket removes its captures from the active database. Once deleted, the capability URL stops working and the application cannot restore it.

03

Per-bucket rolling limits

A bucket is limited to 10,000 stored captures or approximately 50 MiB of stored request data under the production defaults. When a limit check finds either threshold reached, the oldest captures are removed in batches so newer evidence remains available.

These are safety ceilings, not storage guarantees. High-volume testing should use infrastructure you control with a retention policy designed for that workload.

04

Per-request and manual deletion

Incoming request bodies larger than 1 MiB are rejected. In the dashboard, Clear requests removes every capture while preserving the endpoint and its response settings. Delete bucket removes the endpoint and all of its active captures.

Capability holders can perform those deletion actions, which is another reason to keep the bucket URL private. Deletion is not reversible from the product UI.

05

Backups and local history

This notice does not promise an immediate erasure time for infrastructure backups or disaster-recovery media. Do not submit data whose handling depends on a guaranteed backup-erasure deadline.

The recent-bucket list is stored separately in your browser. Server-side deletion does not edit every browser that saved the URL; clear local site data if you also want to remove that history.

Review security guidance