# Data retention

| Data | Kept |
|---|---|
| Stopped disk | At least 14 days for free, then paid cold storage |
| Sleep memory image | Up to 7 days, then the sandbox becomes `stopped` |
| Older snapshots | Up to 14 days |
| Command history | 90 days by default |
| Deleted sandbox | Key destroyed at once; ciphertext removed after |

```sh
harebox data-retention status
harebox data-retention set --command-history-days 30
```

## Delete

`harebox delete` destroys the encryption key before it reports success, so the data is unreadable at that moment. It can't be undone.

```sh
harebox new --name temp
harebox delete current
```

Connect delete to an explicit request, never to idleness.