Delete your account

Deletion is immediate. Nothing is held for a waiting period.

Delete it yourself

Sign in, then go to Settings → Delete account and type your username to confirm. Sign in if you have not already.

In the Android app the same action lives under Settings → Delete account, calls the same endpoint, and uses the same typed confirmation.

The endpoint is DELETE /api/v1/me (session cookie plus {"confirm":"your-username"}). The web form posts to /settings/account/delete with a CSRF token.

If you cannot sign in

Ask the administrator of this instance to delete the account for you. They can do it from the admin tools; there is no self-service route that works without signing in.

What is removed

• Your account row: username, email address, first and last name, bio, avatar reference, language and theme, and password hash.
• The link to your external login provider (the stored OIDC subject).
• Every way into the account: all browser/app sessions, password-reset tokens and mobile one-time sign-in codes.
• Group memberships, favorites, cart rows, ratings and the comments attached to them.

What stays

• Recipes you authored remain published, with the author removed. They can still be viewed, ordered and rated by others.
• Recipe edit-history entries you made remain as anonymous history.
• Orders remain as transaction records with the link to your account removed. Their tracking tokens stay valid, so an order link you already shared keeps working. Item names, quantities and prices are retained.

Backups taken before the deletion may still contain the old data until they rotate out. Backups are not used to restore an individual deleted account. Files that were uploaded (recipe images, avatars) may remain on disk after the account row is removed; the operator can remove them on request.

External login

If you signed in through OIDC/Authelia, deleting the Sandwitches account does not delete your account at that identity provider. Delete or disable it with that provider as well if you want the identity gone.

Last superuser

An account that is the only remaining superuser cannot be deleted through this route, because doing so would leave the instance with no administrator. Promote another account first; the deletion is then allowed.

The full detail is in the privacy policy.