Read your optional product-usage analytics consent

Persist a cryptographically random 32-byte lowercase hex receiptToken privately before calling. Reuse it after a timeout. Only its hash is stored. New requests require recent authentication; receipt recovery never creates a second deletion request. Privileged processing removes local Better Auth credentials. Kept clinical, financial, safety and legal evidence and backup handling remain disclosed separately.