Data Retention & Security Policy
Effective Date: November 17, 2025
Pattern Nexus is committed to handling user data responsibly, transparently, and securely. This policy explains what information we retain, how long we keep it, and the safeguards used to protect it throughout our systems and hosting environment.
1) Overview
This policy works together with our Privacy Policy and Cookie Policy. It outlines:
- which types of information may be stored,
- how long each category is retained,
- how data is secured throughout our infrastructure.
2) What We Retain
Depending on your interaction with the site, Pattern Nexus may retain the following categories of information:
- Contact information: Emails, messages, and form submissions for communication or support.
- Newsletter signups: Your email address and signup timestamp.
- Account details (if accounts are enabled): Email, hashed passwords, OAuth tokens (Google/Facebook), and login timestamps.
- Consent records: Cookie preferences stored in
pn_cookie_prefsor similar local storage. - Analytics data: Aggregated GA4 metrics when Analytics is enabled by user consent.
- Custom view-counter data: Pageview data collected through client-side scripts (never personally identifiable).
- Security logs: IP addresses, firewall logs, failed login attempts, and Cloudflare security events.
- User-generated content: Comments or submissions you post publicly.
3) Retention Periods
| Data Type | Purpose | Retention Period |
|---|---|---|
| Support emails & form messages | Responding to inquiries and maintaining communication records | Up to 24 months |
| Newsletter subscriber emails | Delivering newsletters and managing subscriptions | Until you unsubscribe or request deletion |
| User account data (if applicable) | Login functionality and security | Stored until account deletion |
| Cookie & consent records | Legal compliance and honoring preferences | 12 months (renewed upon re-consent) |
| Analytics data (GA4) | Performance measurement and aggregated insights | 14–26 months (per provider settings) |
| Custom view-count script data | Tracking article engagement | Aggregated and retained indefinitely (non-identifiable) |
| Cloudflare firewall & security logs | Fraud detection, attack mitigation, and debugging | 24 hours to 30 days (per Cloudflare retention cycle) |
| Server security/error logs | Diagnosing issues, preventing abuse | 90–180 days unless required longer for security events |
| User-generated content (comments, submissions) | Community history and content integrity | Indefinite or until removal requested |
4) Deletion & Anonymization
- When retention periods expire, data is securely deleted or anonymized.
- Anonymized analytics summaries may be kept indefinitely for research or performance analysis.
- Users may request deletion of identifiable information at any time — instructions are in our Privacy Policy.
5) Security Measures
Pattern Nexus employs multiple layers of security to protect user data:
- HTTPS/TLS encryption for all data in transit
- Cloudflare WAF (Web Application Firewall) and bot protection
- Rate limiting and threat detection systems
- Regular software updates and security patches
- Least-privilege access controls for administrative accounts
- Hashed passwords (never stored in plain text)
- Optional 2FA for admin-level logins
- Secure, restricted-access backups
6) Hosting & Storage Location
Pattern Nexus is hosted on reputable, security-certified infrastructure. Data may be stored in the United States or other regions with equivalent data-protection standards. Our hosting providers maintain:
- physical data center security,
- network-level defenses,
- redundant hardware and power systems,
- routine security audits.
7) Breach Response
While no system is entirely immune to threats, Pattern Nexus follows a structured incident response plan. In the event of a confirmed data breach, we will:
- Investigate and contain the breach immediately,
- Notify affected users without unreasonable delay,
- Notify relevant authorities where legally required (typically within 72 hours),
- Provide guidance on protective steps users may take.
8) User Rights & Deletion Requests
You may request access, correction, or deletion of your personal data at any time by emailing [email protected]. Verification may be required to prevent unauthorized actions.
9) Policy Updates
This policy may be updated as laws, technology, or site features evolve. The most recent version will always appear on this page, and the Effective Date will reflect the latest revision.
Pattern Nexus treats data stewardship as part of intellectual integrity. Protecting your information helps protect the foundation of trustworthy research and communication.
