Export and account deletion
Save the data and photos you want to keep before deleting your account, uninstalling, or changing phones.
Download My Data
On the website, open Account & Plus or Import & Export and select Download My Data. On mobile, open More → Account & data → Download My Data and choose where to save the download. Keep the screen open while a large export is prepared.
The ZIP includes:
- inventory.csv: one spreadsheet row per physical copy, with stable copy, design and release IDs. The existing CSV import remains available separately.
- inventory.json: account display details and plan status; copies, conditions, notes, Best copy selections, boxes and their locations/notes; private ornament definitions; design, release and barcode associations and available catalog tags; share permissions and invitation states; your contribution details; and photo associations, types and primary selections. Your own uploaded contribution-review photos are included with their submission associations.
- photos/: actual full optimized private cloud photographs available to you, including packaging photos. These are the stored optimized images, not camera originals that BaubleStash never retained.
- manifest.json: format version, creation time, file sizes and SHA-256 checksums.
- README.txt: instructions for opening the package without BaubleStash.
The ZIP excludes passwords and credentials, other collectors’ private stashes and personal details, internal security information, public catalog pictures, and photos that exist only on a device. Share configuration omits recipient identities and email addresses. Personal copy tags are not currently supported. Unsynced device edits are not in the cloud archive.
Extract the ZIP with your computer’s normal ZIP tool. Open the CSV in a spreadsheet and the JPG files in an image viewer. Keep the archive private. It is a portable copy, not a one-click restore package; the CSV importer does not restore every JSON field or photo.
Free and lapsed Plus accounts can download their available data. Retained cloud photos remain exportable without renewing Plus. If a required cloud photo is missing or damaged, the download reports an error instead of producing a supposedly complete archive. Retry or seek account help before deleting. Current downloads are bounded to available temporary server capacity (up to 64 GB of content); very large exports need support before deletion.
Save photos stored only on your phone
On Android or iPhone:
- Open More → Account & data.
- Select Save or transfer local photos.
- Choose a destination in your phone’s file-sharing sheet, such as a file-storage app.
- Check the saved ZIP before deleting anything.
For just one physical copy, open its photo section and select Save or transfer these photos. Each ZIP includes full available app-managed photos and a manifest connecting them to copy IDs and ornament/packaging labels. These are the available optimized images; camera originals are not retained by the app.
This works offline if your chosen destination supports offline saving. It does not require Plus or upload photos to BaubleStash. Canceling or failing an export leaves the original photos unchanged. If there is insufficient space, a missing file, or a permission problem, free some space or choose another destination and retry. Export fewer photos from individual copies if needed.
A cloud archive cannot include photos stored only on a phone. Save both archives if you use both kinds of photos. Exporting does not automatically import pictures into BaubleStash on another device; the manifest helps you identify their copies.
Your sharing destination and operating-system backups are outside BaubleStash’s control. App-private photos may be lost on uninstall or device loss. Apple/Google device backups and gallery backup services may hold separate copies; check their settings. Android and iPhone use their native file-sharing sheets, whose destinations vary by installed apps.
Request permanent account deletion
On the website, open Account & Plus → Delete My Account, or go directly to Account deletion. You can sign in on that page. If you cannot sign in, use its password-recovery link, then return. An account without a password must set one using email recovery first. If you cannot access the account email, email support@baublestash.com for account-recovery help.
On mobile, open More → Account & data → Delete My Account.
- Download the data and local photos you want to keep.
- Read the consequences and subscription guidance.
- Confirm that you have saved what you need, or choose to proceed without saving.
- Enter your current password and type DELETE MY ACCOUNT.
- Select Permanently delete my account. Mobile asks for one final confirmation.
This is irreversible. It is separate from Plus expiration and does not wait 90 days.
What happens next
- Sign-in sessions, recovery credentials, sharing invitations and access are revoked immediately. Your email, display name and password are removed from the active identity.
- Private inventory, boxes, notes, private ornaments, pending contributions, and private ornament/packaging cloud photos are queued for cleanup. Failed storage cleanup retries; pending work is not reported as finished.
- Approved licensed public catalog records remain available to other collectors. Personal attribution on public images is removed. Minimal anonymous license evidence remains while the licensed catalog content is published.
- On the phone that submits deletion, app-managed local inventory, photo queues, photos and cloud cache are removed after confirmation. Interrupted local cleanup retries when the app reopens. Export first. Ordinary sign-out continues to preserve owner offline data.
- A website request cannot remotely erase another offline device, exported files, gallery originals or operating-system backups. Those need separate removal on each device/provider.
Keep the web deletion receipt. If you close the page, return to Account deletion and use Check an existing deletion request with your receipt, without signing in. Receipt availability follows the minimal deletion-audit retention schedule. Private data removed means private inventory cleanup and unreferenced cloud-object removal finished. It does not mean every retained record or backup has expired. Backup, audit and necessary financial-record retention are separate from live private cleanup.
Retained records and backup copies
The following schedules are recorded in the current policy draft and require confirmation before hosted enforcement. They are not evidence that backup copies have already expired.
| Records | Retention after deletion |
|---|---|
| Live private inventory and photos | Cleanup starts promptly; failed removal retries and is not reported as complete |
| Backup copies, including retained cloud-object versions | Expire within 30 days |
| Minimal deletion audit record | 12 months after private cleanup completes |
| Necessary payment/tax records | 7 years, without your private stash or photographs |
| Approved public catalog content and minimal anonymous license evidence | While the licensed content remains published |
The current draft specifies 30 days for routine security logs. A documented legal dispute can extend only the relevant billing or audit records, with regular review. It does not preserve your whole private stash. Production backup aging, log retention and legal disclosures must be verified before public launch; local software checks do not prove hosted backup expiration.
Active subscriptions
Deleting a BaubleStash account does not cancel Apple or Google subscriptions. Charges may continue. Use the subscription-management links in the deletion flow to cancel through the original store. You can request immediate account deletion even while a subscription is active. A later store event cannot reactivate the deleted stash.
Plus expiration is different
True Plus lapse preserves inventory, boxes, notes and local photos. Private cloud photos have a confirmed 90-day retention period with export access. Scheduled private-photo deletion is implemented; hosted activation still requires storage, notification and recovery checks. Renewal cancels deletion that has not started and cannot recreate bytes already removed. See Subscriptions and retention.