Researcher Claims Google AI Studio's Delete Button Only Strips a Pointer, VRP Auto-Closed the Report in 60 Seconds

Hacker News·low signalXBlueskyLinkedInCopy link

An independent researcher published evidence on September 19 that Google AI Studio's Delete action returns a fake 404 while the underlying prompt data persists on Google's backend, and that Google's AI Vulnerability Reward Program closed the report as 'Intended Behavior' within roughly 60 seconds. The post reached 49 points and 29 comments on Hacker News and is backed by a long series of the researcher's own threads on Google's AI Developers Forum. This is a single-researcher claim with no Google confirmation, but the practical takeaway holds regardless: treat AI Studio deletion as UI-level until Google publishes its retention behavior.