INVITE ONLY
OBSERVATORY

Support · Identity

Delete everything. Or become someone new.

Deletion ends the account immediately, with no grace period and no way back. Identity rotation is not in this build; what it will do is stated below, marked as roadmap.

Delete the account and leave nothing behind.

  1. Profile → Settings → Delete Account

    The confirmation names exactly what is about to happen. There is no cooling-off email and no retention window pretending to be a courtesy.

  2. The key log is left standing, on purpose

    Nothing is revoked or rewritten in the transparency log. The log is append-only by construction, and an append-only log that can be edited to erase a past entry is not a transparency log at all — so deletion does not touch it. What ends is resolution: there is no fanout, no tombstone, and no goodbye frame, and peers simply stop resolving your Profile ID.

  3. Server-side record hard-deleted

    No grace period. Your device wipes its local state; what your contacts already received stays on their devices, and we will not pretend otherwise.

Rotation is not in this build.

There is no rotation control in the app today, and no screen carries one. The row that will hold it reads Coming soon in Profile. What follows is what each instrument is for when it ships — roadmap, stated as roadmap, so nobody goes hunting for a screen that is not there.

  1. The Profile ID — the public handle (roadmap)

    The name people find you by. Rotate it and the old handle stops resolving; your conversations, contacts, and history stay.

  2. The SERPENT ID — the secret root (roadmap)

    The private identifier that never appears in chat, and never leaves your device. Rotation will append the new identity to the log rather than retract the old one; verified contacts will see the change and should re-run the safety-number ceremony.

Ask the three that go wrong.

Does deleting my account delete my messages from my contacts' phones?

No. Messages already delivered live on their devices — end-to-end encryption means their copy answers to them, not to us. Deletion removes your account, your keys, and your server-side record.

Is there a way to undo a deletion?

No. The record is hard-deleted in a single transaction. If you hold an encrypted backup and its passphrase, you can restore a device — but a deleted account is gone as a matter of design, not policy.

Why would I rotate instead of delete?

Rotation is for a burned identifier — a handle that leaked further than you wanted. You keep your history, your contacts, and your subscriptions; only the identifier changes and the old one is retired in the log.