Deleting is immediate and cannot be undone. There is no grace period, no cancel window, and no way for support to bring the account back afterwards. Read this before, not after.
Try the smaller thing first
Most reasons to delete have a narrower answer.
You want it out of public view. Unpublish. It takes effect immediately and cannot be blocked.
You gave somebody a link and regret it. Revoke or rotate the share link. Any badge or link built from it stops working.
Too many emails. Switch off the weekly confirmation summary in your email preferences.
You want your data. Download the full account export first. It is free on every plan, and after deletion it is gone.
Deleting to shake off an adverse outcome does not work. The next two sections explain why.
What you need in order to confirm it
Your username, plus one of these, depending on how you sign in: your password, if you have one; a one-time code sent to your email, if you sign in with Google and have no password; and your two-factor code as well, if two-factor is switched on.
What is erased
Your email address, your name, your password, your two-factor secrets, your connections to other services and the access tokens behind them, your devices, your notifications, and your Trust Coach conversations. Erased, not hidden.
What stays, and why
An agreement you created is also the record the other party relies on. If a corner shop confirmed that you rewired the stockroom on time, that confirmation is part of the shop's record too. Deleting your account and taking it with you would rewrite somebody else's history without asking them.
So deletion works like this. Your account is replaced by an anonymous marker, with every personal detail scrubbed out of it. Anything that was only ever yours is deleted outright. Evidence that involves a counterparty stays, stripped of anything identifying you, and a retained agreement shows "Deleted account" where your name was.
This means deleting does not remove an adverse outcome from anybody else's record, and it does not remove the outcome itself.
The one thing kept from your identifiers
Credda keeps two one-way codes made from your email address and your username, plus two dates, for three years, and then deletes them.
They exist because if both identifiers were freed the instant an account was erased, an adverse record would be disposable: erase, sign up again with the same address, start clean.
What they can do: answer the question "is the address being registered right now the same one that was erased".
What they cannot do: tell anyone who you were, reconnect you to your old record, or refuse you an account. A recognized address registers normally.
They are one-way, so nobody, including Credda, can turn one back into your email address.
Your published link and any credentials
Your published share token lives on a separate service, and it is revoked after the erasure has gone through.
If that revocation does not complete straight away, the answer you get says so: it is recorded as outstanding and will be retried. That is a real answer and Credda does not dress it up as finished. If you need the link dead before you delete, revoke it yourself first, then delete.
Closing an organization is a different thing
Closing an organization you own is not the same as deleting your account. Memberships are removed, pending invitations are canceled, commitment history is not touched, and the organization's address is never given to anybody else.
If you only want to leave an organization rather than close it, any member can leave, and an owner or admin can remove a member.