# Deleted user address appears in email log

**URL:** https://meta.discourse.org/t/deleted-user-address-appears-in-email-log/385760
**Category:** Support
**Tags:** email, gdpr
**Created:** [October 15, 2025, 8:31pm UTC](https://meta.discourse.org/t/deleted-user-address-appears-in-email-log/385760 "2025-10-15T20:31:19Z")
**Posts on this page:** 7
**Page:** 1

<div class="post-metadata">

### Author: ![ToddZ](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/toddz/32/328350_2.png) [@ToddZ](https://meta.discourse.org/u/ToddZ)
#### Post date: [October 15, 2025, 8:31pm UTC](https://meta.discourse.org/t/deleted-user-address-appears-in-email-log/385760/1 "2025-10-15T20:31:19Z")

</div>

In reviewing the email log, I noticed that we would appear to be emailing an address that doesn’t have a user:

 ![ghost_user_email](https://global.discourse-cdn.com/meta/original/4X/9/b/3/9b34a4bdb43b10cbfd58b354f8dc95493794ede1.gif)

Research elsewhere shows that this was a recently self-deleted user. These log entries do predate the deletion – but there are no similar entries for other deleted users.

Just wondering how things work: does user deletion normally remove such traces?

This makes it sound like “yes”…

> [@Is there a way to retrieve information about deleted users?](https://meta.discourse.org/t/is-there-a-way-to-retrieve-information-about-deleted-users/166031/4):
>
> I don’t think there is any way to recover the email address of a deleted user. Discourse handles deleting users differently than it handles deleting posts or topics. When a user is deleted, they are fully deleted from the database, when a post or topic is deleted it is only soft-deleted so it can be recovered at a later time.

---

<div class="post-metadata">

### Author: ![ToddZ](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/toddz/32/328350_2.png) [@ToddZ](https://meta.discourse.org/u/ToddZ)
#### Post date: [October 17, 2025, 5:52pm UTC](https://meta.discourse.org/t/deleted-user-address-appears-in-email-log/385760/2 "2025-10-17T17:52:24Z")

</div>

Also: this self-deleted user’s single post (which got deleted too) was 10 months old.

 ![Log entries show a "delete user" and "delete post."](https://global.discourse-cdn.com/meta/original/4X/2/5/f/25f517fa68270914f160cc6d9c0442bc6b1dd757.gif)

Shouldn’t this user’s self-deletion have been prevented by this setting?:

![Setting "Delete user max post age" is set to 60 days.](https://global.discourse-cdn.com/meta/original/4X/8/b/e/8bed047a79f6dfcc4efdce85777dcf59f1a48f06.png)

---

<div class="post-metadata">

### Author: ![Moin](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/moin/32/554653_2.png) [@Moin](https://meta.discourse.org/u/Moin)
#### Post date: [October 18, 2025, 12:12pm UTC](https://meta.discourse.org/t/deleted-user-address-appears-in-email-log/385760/3 "2025-10-18T12:12:28Z")

</div>

I think the 60 days define how long staff can easily delete a user. The 60 days are used in the warning shown to staff on the user’s admin page

 ![Screenshot_20251018_140931_Firefox](https://global.discourse-cdn.com/meta/original/4X/3/2/3/323f7cf7134118c9e13cb7bcc62887929a5fa9f5.jpeg)  
  

Self deletion is based on `Delete user self max post count`

 ![Screenshot_20251018_140855_Firefox](https://global.discourse-cdn.com/meta/original/4X/5/2/0/520226d9df4308a13f4aecea9dcafc32e1c04abc.jpeg)

---

<div class="post-metadata">

### Author: ![ToddZ](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/toddz/32/328350_2.png) [@ToddZ](https://meta.discourse.org/u/ToddZ)
#### Post date: [October 21, 2025, 7:37am UTC](https://meta.discourse.org/t/deleted-user-address-appears-in-email-log/385760/4 "2025-10-21T07:37:16Z")

</div>

Thanks for the clarification, Moin. A small tweak to the _Delete user max post age_ description could make it clearer: `Don't allow staff to delete users whose first post in older than (x) days.`

I’m still curious whether the address remaining in email logs is a glitch. Seems like that could be a GDPR/PII type of concern.

---

<div class="post-metadata">

### Author: ![Moin](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/moin/32/554653_2.png) [@Moin](https://meta.discourse.org/u/Moin)
#### Post date: [October 21, 2025, 7:51am UTC](https://meta.discourse.org/t/deleted-user-address-appears-in-email-log/385760/5 "2025-10-21T07:51:14Z")

</div>

How long do you keep your email logs? By default those are deleted after 90 days (`Delete email logs after days`). I think it’s as HAWK often writes: it’s not the software that is compliant, but its use.

---

<div class="post-metadata">

### Author: ![ToddZ](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/toddz/32/328350_2.png) [@ToddZ](https://meta.discourse.org/u/ToddZ)
#### Post date: [October 21, 2025, 8:13am UTC](https://meta.discourse.org/t/deleted-user-address-appears-in-email-log/385760/6 "2025-10-21T08:13:30Z")

</div>

Yes, mine are kept 90 days – so I probably just don’t have more messages-to-deleted-users to see there.

I might have spent too much time reading threads about GDPR concerns, account deletion, etc., and took away an incorrect notion about addresses being immediately purged.

---

<div class="post-metadata">

### Author: ![system](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/system/32/443519_2.png) [@system](https://meta.discourse.org/u/system)
#### Post date: [November 20, 2025, 8:13am UTC](https://meta.discourse.org/t/deleted-user-address-appears-in-email-log/385760/7 "2025-11-20T08:13:39Z")

</div>

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.
