Information processed: the inviter's and invited account's internal identifiers, public invite code, linking and qualification times, theme choices and awards, and the announcement hiding expiry.
We use this to link invitations, check whether a first care record was saved, prevent duplicate rewards, provide themes and remember announcement preferences. Other participants see counts, not animal details, record contents or account identifiers.
When an account is deleted, we remove or unlink its event information. Another participant's earned reward keeps only a random event identifier that is no longer linked to the deleted account. Earned themes and choices do not expire simply because the event ends.
The device keeps an invite code for installation and sign-in for up to seven days, or less if it is cleared after linking or sign-out. This is separate from the 30-minute temporary storage for parent-confirmation and ownership-transfer invitations.