Well, it looks like I only
thought I included that error. Still, now that I've figured out the distinction this might be a useful reminder for others too: in the
privacy policy we commit to retaining personal data "for the shortest possible time that is consistent with the maintenance,
understanding, and improvement of the Wikimedia Sites, and our
obligations under applicable U.S. law." The specific period of 90 days is just our current implementation of that commitment, which we document in the
data retention guideline.