Version 0.69.1

A housekeeping job can no longer take a record of one of your files with it.

A file that shares one storage bundle with other files keeps a pointer to that bundle, and nothing said what should happen to the file's record if the bundle's record were removed. A database with nothing said refuses the removal — which our code turns into we could not erase this on your screen — so the answer to may I delete my account rested on which half our database happened to clear first. The rule is now written down: the pointer empties and the file's record stays. We deliberately did not choose the other rule, because the next thing that will remove bundle records is a job that reclaims unused storage space and a cleanup job must not be able to delete your data; measured before changing it, no file in the live database carries such a pointer today.