OtterTrash

OtterTrash is OtterStorage's recycle bin for buckets. Deleting a bucket by mistake can be catastrophic, so instead of destroying it immediately we move it to the trash: it leaves your view and your usage, but stays recoverable during a grace period before permanent deletion. Once that window passes, it's purged automatically.

How it works

A deleted bucket's lifecycle has three phases:

1. You delete the bucket → it moves to OtterTrash ("trashed" state).
2. Grace period (by default, 7 days): the bucket is recoverable at any time.
3. Permanent deletion: when the window expires, an automatic process purges it. From then on it can't be recovered.

What happens when a bucket goes to the trash

• The bucket stops appearing in your active bucket list and can no longer be used via the S3 API.
• Its original name is freed immediately: you can create a new bucket with that same name without waiting.
• The access keys tied to that bucket are removed. If you restore it later, you'll need to create new keys.
• Your data stays there, intact, until permanent deletion: the trash doesn't touch your content.

Restoring a bucket

While the bucket is within the grace period, you can restore it from the console and it returns to your account with all its content. Two things to keep in mind:

• If the original name is already taken by another active bucket, the restore uses a -restored suffix to avoid a clash.
• You'll need to create new access keys, since the previous ones were removed when it went to the trash.

If permanent deletion has already started, restoring is no longer possible: it's a point of no return.

Immutable buckets (Object Lock)

If a bucket has Object Lock enabled, OtterTrash never auto-purges it while it holds objects under retention: immutability wins. These buckets stay in the trash (recoverable) and their WORM data remains intact, in line with their compliance guarantee. It's a deliberate safeguard: no automatic process can bypass a COMPLIANCE or GOVERNANCE retention.

OtterTrash protects buckets; versioning protects objects

It's worth not confusing two levels of protection:

• OtterTrash is your safety net against the accidental deletion of a whole bucket.
• Versioning is your safety net against the deletion or overwrite of individual objects: it keeps previous versions and a deleted object can be recovered while its version exists.
• For an immutability guarantee against ransomware or for compliance, combine versioning with Object Lock.

Since OtterStorage doesn't charge for requests or deletes, keeping versioning and a roomy trash window doesn't penalize your bill with per-operation costs: you only pay for the storage the data occupies while it exists.

Frequently asked questions

How long does a bucket stay in the trash? +

By default, a 7-day grace period. During that time you can restore it; when it expires, it's permanently deleted automatically.

Can I reuse a deleted bucket's name right away? +

Yes. When the bucket goes to the trash, its original name is freed instantly, so you can create another bucket with that same name without waiting.

Do I get my access keys back when I restore? +

No. Keys are removed when the bucket goes to the trash. After restoring, create new keys from the console. Your data is recovered intact.

Is a bucket with Object Lock deleted automatically? +

Not while it holds objects under retention. OtterTrash respects immutability: buckets with Object Lock aren't auto-purged and stay recoverable.