Whole rolling 24-hour days, at least one. The effective lifetime is the minimum of system limits, the owning account and monitor overrides. Null inherits. Shortening immediately hides expired data and schedules physical cleanup; a paused cleanup shows its reason. Expired data does not return after lengthening or reset. Incidents, delivery history, reports and security logs have separate lifetimes; external copies are unaffected. Changes require an owning browser account, CSRF and a current revision. Account settings always belong to the authenticated person, including when a shared workspace is selected. Monitor readers may inspect the policy; only its workspace owner may change it. If this feature is unavailable, changes respond with HTTP 503; the read response reports whether you may change the setting.
Whole rolling 24-hour days, at least one. The effective lifetime is the minimum of system limits, the owning account and monitor overrides. Null inherits. Shortening immediately hides expired data and schedules physical cleanup; a paused cleanup shows its reason. Expired data does not return after lengthening or reset. Incidents, delivery history, reports and security logs have separate lifetimes; external copies are unaffected. Changes require an owning browser account, CSRF and a current revision. Account settings always belong to the authenticated person, including when a shared workspace is selected. Monitor readers may inspect the policy; only its workspace owner may change it. If this feature is unavailable, changes respond with HTTP 503; the read response reports whether you may change the setting.
Browser session: __Host-mb_session cookie.
When using a browser session for a mutation, send the current CSRF token in X-CSRF-Token with the same-site cookie. OAuth consent uses its documented form field.
Private API responses prohibit storage. Public OAuth metadata is cached for 300 seconds; live streams additionally prohibit transformation.
Content-Language
string; {"enum":["en","de"]}
Language of human-readable response text, resolved from Accept-Language or the documented browser preference. Technical codes and identifiers remain stable.
Private API responses prohibit storage. Public OAuth metadata is cached for 300 seconds; live streams additionally prohibit transformation.
Content-Language
string; {"enum":["en","de"]}
Language of human-readable response text, resolved from Accept-Language or the documented browser preference. Technical codes and identifiers remain stable.
Private API responses prohibit storage. Public OAuth metadata is cached for 300 seconds; live streams additionally prohibit transformation.
Content-Language
string; {"enum":["en","de"]}
Language of human-readable response text, resolved from Accept-Language or the documented browser preference. Technical codes and identifiers remain stable.
Private API responses prohibit storage. Public OAuth metadata is cached for 300 seconds; live streams additionally prohibit transformation.
Content-Language
string; {"enum":["en","de"]}
Language of human-readable response text, resolved from Accept-Language or the documented browser preference. Technical codes and identifiers remain stable.
Private API responses prohibit storage. Public OAuth metadata is cached for 300 seconds; live streams additionally prohibit transformation.
Content-Language
string; {"enum":["en","de"]}
Language of human-readable response text, resolved from Accept-Language or the documented browser preference. Technical codes and identifiers remain stable.
Private API responses prohibit storage. Public OAuth metadata is cached for 300 seconds; live streams additionally prohibit transformation.
Content-Language
string; {"enum":["en","de"]}
Language of human-readable response text, resolved from Accept-Language or the documented browser preference. Technical codes and identifiers remain stable.
Private API responses prohibit storage. Public OAuth metadata is cached for 300 seconds; live streams additionally prohibit transformation.
Content-Language
string; {"enum":["en","de"]}
Language of human-readable response text, resolved from Accept-Language or the documented browser preference. Technical codes and identifiers remain stable.
This change does not have a general retry guarantee. If the response is unclear, read the affected resource before trying again. Follow Retry-After waiting times and request new sign-in or action codes when they expire.
Replace demo IDs, timestamps and placeholders with your own values. For a retry, keep the same IDs, time and content. These examples do not run requests on this page.
Keep login links, codes, cookies and keys private. Do not print them in logs or share them in support requests.
Whole rolling 24-hour days, at least one. The effective lifetime is the minimum of system limits, the owning account and monitor overrides. Null inherits. Shortening immediately hides expired data and schedules physical cleanup; a paused cleanup shows its reason. Expired data does not return after lengthening or reset. Incidents, delivery history, reports and security logs have separate lifetimes; external copies are unaffected. Changes require an owning browser account, CSRF and a current revision. Account settings always belong to the authenticated person, including when a shared workspace is selected. Monitor readers may inspect the policy; only its workspace owner may change it. If this feature is unavailable, changes respond with HTTP 503; the read response reports whether you may change the setting.
Whole rolling 24-hour days, at least one. The effective lifetime is the minimum of system limits, the owning account and monitor overrides. Null inherits. Shortening immediately hides expired data and schedules physical cleanup; a paused cleanup shows its reason. Expired data does not return after lengthening or reset. Incidents, delivery history, reports and security logs have separate lifetimes; external copies are unaffected. Changes require an owning browser account, CSRF and a current revision. Account settings always belong to the authenticated person, including when a shared workspace is selected. Monitor readers may inspect the policy; only its workspace owner may change it. If this feature is unavailable, changes respond with HTTP 503; the read response reports whether you may change the setting.
Whole rolling 24-hour days, at least one. The effective lifetime is the minimum of system limits, the owning account and monitor overrides. Null inherits. Shortening immediately hides expired data and schedules physical cleanup; a paused cleanup shows its reason. Expired data does not return after lengthening or reset. Incidents, delivery history, reports and security logs have separate lifetimes; external copies are unaffected. Changes require an owning browser account, CSRF and a current revision. Account settings always belong to the authenticated person, including when a shared workspace is selected. Monitor readers may inspect the policy; only its workspace owner may change it. If this feature is unavailable, changes respond with HTTP 503; the read response reports whether you may change the setting.