On Wed, 21 Nov 2018 at 11:39, Neil Patel Quinn <nquinn@wikimedia.org> wrote:
(correcting my earlier error confusing the privacy policy and data retention guidelines)

Well, it looks like I only thought I included that error. Still, now that I've figured out the distinction this might be a useful reminder for others too: in the privacy policy we commit to retaining personal data "for the shortest possible time that is consistent with the maintenance, understanding, and improvement of the Wikimedia Sites, and our obligations under applicable U.S. law." The specific period of 90 days is just our current implementation of that commitment, which we document in the data retention guideline.