In the United States,what does it mean for a website to keep records for legal compliance? And what is typically kept?
<p>Mediafire claims they delete or do not store Logs of who access your account in their data retention policy. However, in there data retention policy they state they keep records for legal compliance for up to 10 years. What does a website typically keep for legal compliance? For example, in their TOS they state: </p>

<ul>
<li><strong><em>"Information about your devices plus your browser information, browser history, IP address, the Internet Service Provider (ISP) you use, your geolocation and system configuration information is recorded."</em></strong></li>
</ul>

<p><a href="https://i.stack.imgur.com/C2vwy.png" rel="nofollow noreferrer"><img src="https://i.stack.imgur.com/C2vwy.png" alt="enter image description here"></a></p>

<ul>
<li>If they <strong>Claim to keep no logs of who access your account</strong> then what's kept for legal compliance?</li>
</ul>

<p><a href="https://i.stack.imgur.com/E5mRD.png" rel="nofollow noreferrer"><img src="https://i.stack.imgur.com/E5mRD.png" alt="enter image description here"></a>
<a href="https://i.stack.imgur.com/IbNxw.png" rel="nofollow noreferrer"><img src="https://i.stack.imgur.com/IbNxw.png" alt="enter image description here"></a></p>

<p>There is really no way to know what they retain, beyond what they state in their TOS. There is no law in the US requiring or forbidding such logs, so they can keep whatever they think will be helpful to them if a legal problem should arise.</p>

united-states legal-terms