When Deleted Still Means Public

“Deleted” is one of the most dangerous words in product copy because users think it means something normal.

They think deleted means gone. Not visible to them. Not visible to others. Not searchable. Not accessible through a link. Not quietly sitting in a public bucket wearing a fake moustache.

Software often means something narrower. Deleted from the list. Deleted from the account. Deleted from the active database. Deleted after a retention period. Deleted from primary storage but still in backups. Deleted except for logs. Deleted except for thumbnails. Deleted except for the thing nobody remembered because it was added during a sprint named “quick fix.”

For AI image tools, the mismatch is brutal. A user may upload a face, generate private outputs, delete the session, and reasonably assume the work is gone. If a shared URL, public gallery path, CDN cache, or derived preview remains accessible, the product has broken the ordinary meaning of the word.

The better product language is specific. “Removed from your gallery” is different from “deleted from our systems.” “Temporary files expire after X” is different from “we delete immediately.” “Backups may retain encrypted copies for Y days” is more honest than a cheerful button that says delete and lets infrastructure improvise.

Engineering should treat deletion as a workflow, not a flag. Source uploads, generated outputs, prompt records, thumbnails, exports, logs, moderation copies, cache keys, and shared links all need a decision. Some should be deleted. Some may need retention for security or legal reasons. The point is to know which is which.

Public accessibility deserves its own test. If a user had a direct link before deletion, can they still open it after deletion? If the answer is yes, the UI has not delivered what most users understand as deletion.

There are legitimate exceptions. Legal holds exist. Abuse investigations exist. Backups exist. But the existence of exceptions does not excuse vague defaults. Exceptions should be narrow, documented, and visible in the policy language.

AI image products ask for intimate material. They do not get to use “deleted” as decorative copy. The word needs to survive a direct-link test.

Further reading: The legal difference between generating an image and keeping one, Why temporary upload needs a retention policy, and What private AI should mean in plain English.