The GDPR states that data must be "kept in a form which permits identification of data subjects for no longer than is necessary for the purposes for which the personal data is processed" (art. 5.1.e).
Piano Analytics offers a default data retention. This is validated or adjusted by the customer (data controller) upon signature of the personal Data Processing Agreement (DPA).
Note: it is important to distinguish the retention period of the data generated by trackers, from the lifetime of the trackers present on users' terminals (see Trackers (Cookie, mobile ID, fingerprinting, etc.) below).