[GH-ISSUE #21782] feat: Users should be able to delete their own account #58234

New Issue

GiteaMirror · 2026-05-05T22:37:11-05:00

GiteaMirror commented

2026-05-05 22:37:11 -05:00

Originally created by @loleg on GitHub (Feb 23, 2026).
Original GitHub issue: https://github.com/open-webui/open-webui/issues/21782

Check Existing Issues

I have searched for all existing open AND closed issues and discussions for similar requests. I have found none that is comparable to my request.

Verify Feature Scope

I have read through and understood the scope definition for feature requests in the Issues section. I believe my feature request meets the definition and belongs in the Issues section instead of the Discussions.

Problem Description

Currently users are able to clear their session data, but not their whole account and contact information from the system. Only admins are able to do this on request.

Desired Solution you'd like

The API is there, but needs an interface button in the settings with some kind of confirmation system (e.g. type out the words "I am and want my account deleted"..)

Alternatives Considered

A form to e-mail the site admins requesting deletion.

It could be in the future a legal requirement for online platforms to allow users to delete their own account at any time, or to conversely apply data retention policies - see clarification & additional thoughts in the comments.

Originally created by @loleg on GitHub (Feb 23, 2026). Original GitHub issue: https://github.com/open-webui/open-webui/issues/21782 ### Check Existing Issues - [x] I have searched for all existing **open AND closed** issues and discussions for similar requests. I have found none that is comparable to my request. ### Verify Feature Scope - [x] I have read through and understood the scope definition for feature requests in the Issues section. I believe my feature request meets the definition and belongs in the Issues section instead of the Discussions. ### Problem Description Currently users are able to clear their session data, but not their whole account and contact information from the system. Only admins are able to do this on request. ### Desired Solution you'd like The [API is there](https://github.com/open-webui/open-webui/blob/1ac3dd4a893e13803e7b889611303c4a7a5cc470/backend/open_webui/routers/scim.py#L772), but needs an interface button in the settings with some kind of confirmation system (e.g. type out the words "I am <user> and want my account deleted"..) ### Alternatives Considered A form to e-mail the site admins requesting deletion. It could be in the future a legal requirement for online platforms to allow users to delete their own account at any time, or to conversely apply data retention policies - see clarification & additional thoughts in the comments.

GiteaMirror closed this issue

2026-05-05 22:37:12 -05:00

GiteaMirror commented

2026-05-05 22:37:13 -05:00

@Classic298 commented on GitHub (Feb 23, 2026):

"It is a legal requirement in many countries for online platforms to allow users to delete their own account at any time"

I am pretty sure there is not a single country that, per law, requires platforms to allow instant self-service deletions of user accounts.
Even GDPR does not require that. Only that the provider has to act within 30 days of deletion request to then delete the data.

Most data protection laws, GDPR, CCPA, LGPD, etc., grant users a right to request deletion of their data, but they do not require platforms to implement a self-service in-app account deletion button. Under GDPR for example, a data controller has up to 30 days to act on a deletion request made through any channel. The closest real exception is China, where MIIT regulations specifically require mobile apps to include an account cancellation function in-app, but that's still not the same as mandating instant self-service deletion.

But that aside, I guess it could be an interesting feature - if the case where companies DO require user data to be retained for certain periods can disable this feature

@Classic298 commented on GitHub (Feb 23, 2026): > "It is a legal requirement in many countries for online platforms to **allow users to delete their own account** <ins>**at any time**</ins>" I am pretty sure there is not a single country that, per law, requires platforms to allow instant self-service deletions of user accounts. Even GDPR does not require that. Only that the provider has to act within 30 days of deletion request to then delete the data. Most data protection laws, GDPR, CCPA, LGPD, etc., grant users a right to request deletion of their data, but they do not require platforms to implement a self-service in-app account deletion button. Under GDPR for example, a data controller has up to 30 days to act on a deletion request made through any channel. The closest real exception is China, where MIIT regulations specifically require mobile apps to include an account cancellation function in-app, but that's still not the same as mandating instant self-service deletion. But that aside, I guess it could be an interesting feature - if the case where companies DO require user data to be retained for certain periods can disable this feature

GiteaMirror commented

2026-05-05 22:37:15 -05:00

@loleg commented on GitHub (Feb 23, 2026):

s/It is a/It could be/g

Thanks for the feedback! I've moved this point out of the main problem description.

@loleg commented on GitHub (Feb 23, 2026): `s/It is a/It could be/g` Thanks for the feedback! I've moved this point out of the main problem description.

GiteaMirror commented

2026-05-05 22:37:15 -05:00

@tjbck commented on GitHub (Feb 23, 2026):

Open to discussion.

@tjbck commented on GitHub (Feb 23, 2026): Open to discussion.

Sign in to join this conversation.

Branches Tags

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: github-starred/open-webui#58234