Article views and search interactions require an affirmative current-version cookie choice. Missing or rejected choices disable optional collection. Search analytics can include normalised queries and pseudonymous identifiers; normalisation is not anonymisation.

Submitted feedback and AI questions, security events, assessment responses and enrolled learning progress are service records. AI-question interaction storage is distinct from generated drafts and provenance retained by other features. Infrastructure may process IP addresses even when analytics reduces identifying information.

Current defaults are 365 days for analytics, 730 days for article feedback and 90 days for stored AI questions. Learning/evidence and generated drafts follow their separate lifecycle rules. Final production retention and provider residuals require approval. Change optional analytics through Cookie preferences; withdrawal stops future optional collection.