Google AI Studio's Delete Button Is a Lie, and Reporting It Got Me Banned in 60 Seconds

Google AI Studio fakes data deletion. VRP auto-banned me in 60s for reporting it

A reproducible architectural flaw (CWE-459) in Google AI Studio: clicking 'Delete permanently' only moves a local .json pointer to Google Drive Trash. The backend never purges the data, so restoring the file instantly reloads the entire chat history. After submitting a forensic dossier to Google's VRP, the ticket was closed as 'Won't Fix (Intended Behavior)' and the reporter was permanently banned within 60 seconds, with no human review or appeal.

The moment the .json file is restored, AI Studio instantly re-binds to the backend and loads the entire chat history in milliseconds. If the backend had actually purged the data, the server would return a 404. It doesn't. The data never left their 'hot storage'. The delete button is just a visual placebo.

More from this day

2026-09-20