Manage consent records and retention

Store the pseudonymous visitor reference, time, selected purposes, applicable region and the notice/configuration version. Avoid names, emails or full IP addresses unless separately justified.

Set a documented period based on accountability needs and limitation periods. Automatically delete or aggregate expired records and restrict export access by role.

Append the new choice rather than rewriting history. Operational systems should receive the withdrawal immediately while the evidence log preserves the sequence of decisions.