The European GDPR law (General Data Protection Regulation) specifies the 'right to be forgotten' rule, which means that all the data generated by the user has to be deleteable and forgotten by Oswald. We provide this functionality through a 'forget session' endpoint where all session related data such as messages and metadata is deleted.