Skip to main content

Members' own data: download and deletion

Let members see their own data and ask for it to be deleted, without having to email you.

Who can do this: members, from the Privacy page of their account. Coordinators and admins can read this to answer questions, and admins finish a deletion.

Steps: download my data​

  1. The member signs in and presses Privacy in their account.
  2. Under Download my data, they press Download my data.
What you'll see

A message says Your data is downloading, and a file called something like my-data-2026-10-12.json is saved. It opens in any text editor. It holds their details, household, children, loans, reservations, payments, consents, the emails the library has sent them, and any notes the team marked as visible to them. It never includes safeguarding notes or the team's own notes.

The download is recorded on the person's timeline and in the audit log.

Steps: ask for my account to be deleted​

  1. On the Privacy page, under Delete my account, the member presses Delete my account.
  2. Gizzago asks Delete your account in 14 days? They press Yes, delete my account.
What you'll see

A banner says "We will delete your account on" and the date 14 days ahead, and "Until then you can change your mind." The member gets an email confirming the request, with an I changed my mind button.

Anything on loan must come back and any balance must be paid first. The Privacy page lists anything still outstanding.

Steps: change my mind​

Within the 14 days, the member opens Privacy (or presses I changed my mind in the email) and presses Keep my account. A message says Request cancelled: "Your account stays as it is."

What the team sees​

A deletion request appears on the person's timeline ("Asked for their account to be deleted (14-day cooling-off)") and in the audit log, as does a cancelled request.

Not yet

Gizzago does not yet delete the account by itself when the 14 days are up, and the request does not show as a badge on the person's record. Until it does, an admin should check the audit log and, after 14 days, anonymise the person from their record (see Export a list, or anonymise a person).

If a member asks by email or in person​

You do not have to send them to their account. An admin can export that household's details from their record (More, then Export (CSV)), or anonymise them once nothing is out or owed.