TapCub is live — analytics, insights and live chat, free on one platform
Help center

How do I handle a data-subject (DSAR) request?

The four request types, what each does, and how opt-out differs from erasure.

Privacy and security1 min readLast updated Oct 28, 2026TapCub teamPart of Export your data and handle deletion requests

Short answer

Open Compliance center → Requests and create one of four types: access, erasure, restrict or portability. Erasure and restrict run after a cooling-off period — 3 days by default, 7 in China mode — during which you can cancel.

The four request types

When a visitor or user asks what you hold about them or asks you to delete it, open Compliance centerRequests and create a request:

TypeWhat happens
AccessCollects every row for the subject into a downloadable file.
ErasureDeletes the subject’s rows after the cooling-off period — 3 days by default, 7 in China mode. Cancel is possible during that window.
RestrictFreezes processing for the subject after the same cooling-off period.
PortabilityLike access, in a machine-readable layout.

The subject can be a device ID, a login ID, an email or a person. Requests can also be created with an API key that has privacy:write, and an external privacy platform can submit them through the OpenDSR path. Each request shows who filed it, when it runs and the result.

Opt-out is not deletion

A visitor who opts out on your site stops future collection for their devices. Rows already stored stay until retention expires or an erasure request removes them. If someone asks you to “stop tracking me and delete my data”, that is an opt-out plus an erasure request.

Opt-out is instant and has no cooling-off period; erasure and restrict do, so you can cancel a mistaken request before it runs.

Did this answer your question?

We use your answers to fix and expand this page.

See your data clearly. Find your growth.

Every click, backed by data. Install one line of code and see your first numbers in a minute.

No credit card · Free plans for analytics and chat · Cookieless analytics