After a verification photo is no longer needed for its stated purpose or a legal duty, delete it from every storage location your system controls—not just the local upload file. In Node.js, fs.unlink asynchronously removes a named file or symbolic link; it does not remove thumbnails, cloud objects, replicas, or backup copies. Node.js documentation
How long should you keep a verification photo?
There is no universal GDPR retention period—such as a fixed number of days—for verification photos. Set a period tied to the specific verification purpose and applicable statutory obligations, then erase or review the data when that period ends. The European Commission says personal data must be stored for the shortest time possible and that organisations should set time limits for erasure or review. European Commission: storage limitation
As an Amazon Associate I earn from qualifying purchases.
The Irish Data Protection Commission likewise explains that GDPR does not specify retention periods for different types of data; the controller must consider relevant statutory obligations when choosing an appropriate period. Irish DPC: retention periods The correct schedule depends on the purpose, jurisdiction, and system design, so do not treat a sample number of days as a legal rule.
Quick wins for a faster PC:
Scan for outdated or missing drivers - takes under a minuteDriver Scan →Clear out junk files and repair common Windows errorsFree Scan →Fix the driver behind crashes, sound loss and screen glitchesFind Drivers →A photo is personal data when it relates to an identifiable person. Whether it is biometric data depends on how it is processed and the applicable legal definition. The European Commission identifies biometric data as a special category of personal data, subject to additional restrictions in specified circumstances. European Commission: sensitive data The UK ICO recommends minimising biometric data collection and retention, setting clear periods, and reviewing data across its lifecycle; it notes that deleting a transient biometric probe after an unsuccessful comparison can be one suitable minimisation measure. ICO: biometric data guidance The ICO says this guidance is under review following UK legislative changes, so it is not a substitute for jurisdiction-specific legal advice.
#1 Best Overall
What does Node.js actually delete?
fs.unlink(path, callback) asynchronously removes the file or symbolic link at the specified local path and reports errors through its callback. It does not operate on directories, and its documented scope is the named path. It is not a secure-overwrite operation and does not prove that other copies have been removed. Node.js file-system API
For example, a promise-based cleanup task can remove a local upload and handle a missing file separately from other failures:
Rank #2
import { unlink } from 'node:fs/promises';
async function deleteLocalPhoto(path) {
try {
await unlink(path);
return { deleted: true };
} catch (error) {
if (error.code === 'ENOENT') {
return { deleted: true, alreadyAbsent: true };
}
throw error;
}
}The example is an implementation pattern, not a requirement prescribed by Node.js or a regulator. In production, derive the path from trusted application metadata rather than user input, and ensure the scheduled task cannot delete an unrelated file.
Do these 3 things before closing this tab:
1Repair Windows errors before they cause bigger problems2Scan for outdated or missing drivers - takes under a minute3Clear out junk files and repair common Windows errorsHow to build a deletion workflow that covers every copy
- Set and store the deadline. Associate each verification record with a retention timestamp based on the documented purpose and applicable duties. Schedule a queue or job to act at that deadline; make retries safe so a previously deleted file does not turn into a permanent failure.
- Inventory the data path. Identify temporary upload files, transformed copies such as crops and thumbnails, OCR output or other verification artifacts, remote object-storage copies, replicas, and any backup or snapshot process. Include any storage managed by a service provider.
- Delete each controlled copy. Use
fs.unlinkfor applicable local files and the relevant provider or service operation for remote objects and derivatives. A successful local unlink is only one part of the workflow. - Coordinate backup expiry. Confirm how snapshots and backups retain recoverable copies, and align deletion expectations with the actual service configuration and agreement. The EDPB cloud code discusses deletion timelines in service agreements and secure disposal of storage media. EDPB: EU Cloud Code of Conduct
- Record an outcome and handle failure. Keep the result visible to the system so failed deletion can be retried or escalated. Restrict access to the photo while deletion is pending, and retain only a minimal audit record if keeping that record is justified by the controller’s purpose and retention rules.
The EDPB reported in 2026 that authorities had identified challenges involving retention periods and deletion in backups. That highlights why a local file deletion alone cannot establish end-to-end erasure; no universal backup-expiry interval follows from that finding. EDPB: 2026 coordinated enforcement report
Rank #3
What should you keep out of logs?
Do not copy the photo or sensitive image data into application logs, tracing payloads, exception reports, or test fixtures. A deletion audit can usually record the verification-record identifier, time, affected storage locations, and outcome without embedding the image itself. Keep that audit record only for a defined operational or legal purpose, with its own retention rule. These are prudent lifecycle and data-minimisation practices; the cited sources do not prescribe a particular Node.js queue, schema, or logging design.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.How can you tell whether deletion is complete?
Define completion against the locations your system actually uses. A local unlink success means the named local path was removed; it does not confirm remote-object deletion, purge of derivatives, or expiry from backups. Track the status of each required deletion action, make failures observable, and retry or escalate according to your operational policy. For cloud-held data, check the service agreement and configuration for deletion timelines rather than assuming a provider-wide schedule. EDPB: EU Cloud Code of Conduct
Quick Recap
Rank #4
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
Free tools Windows power users keep installed
One-click scans. No signup required.
