Loading page
About this tool
Track dormant account deletion requests with real response deadlines under GDPR and CCPA, overdue flags and proof references.
The Old Account Deletion Tracker keeps an inventory of dormant accounts you are closing and calculates the reply deadline for each one from the date you sent the request: one calendar month under the GDPR (Article 12(3), extendable by two further months for complex requests) and 45 days under California's consumer privacy rules (extendable by another 45). Rows are sorted into overdue, escalate, waiting and to-send, and a row only counts as complete once you have recorded the confirmation reference the company gave you. Everything is calculated in your browser; nothing is uploaded.
Open Old Account Deletion Tracker on AltFTool — it loads instantly in your browser.
Add your input to the workspace.
Adjust the options until the result looks right.
Copy or download the output and put it to work.
Calendar-month arithmetic for the GDPR and 45-day counts for CCPA, including the extension dates.
A row marked deleted without a reference stays flagged, because an unverified deletion is not evidence.
Overdue and refused requests sort to the top, then requests you have not sent, weighted by sensitivity.
Under the GDPR the controller must tell you what action it has taken without undue delay and within one calendar month of receiving the request, extendable by two further months for complex requests if it notifies you inside the first month. Under California's consumer privacy rules a business has 45 days to respond, extendable by a further 45 with notice.
Once the response window has passed, send a written follow-up referencing the original request date, then lodge a complaint with the relevant authority — a data protection supervisory authority in the EEA or UK, the California Privacy Protection Agency or Attorney General in California, or the Data Protection Board in India after the company's own grievance process. Keep copies of everything you sent, which is why recording dates and references matters.
Yes, in defined situations — for example where it must keep records to meet a legal obligation such as tax or anti-money-laundering rules, or to establish or defend legal claims. It must tell you the reason, and it should still delete anything not covered by that obligation; if the explanation looks wrong, ask for it in writing before escalating.
No. Deactivation usually hides the profile while the underlying data stays on file and can be restored, whereas deletion should remove the personal data or render it anonymous. Ask explicitly for erasure, and record the confirmation reference — this tool treats a deletion without a written confirmation as unverified for exactly that reason.