Retention is a privacy decision as much as a storage one. Under GDPR and the regimes modelled on it, personal data should be kept no longer than the purpose you collected it for requires, and "we might want it one day" is not a purpose.
The practical rule is to decide which questions you answer each year, keep enough to answer them, and export the summaries before the raw data ages out. Almost nobody does the export, and then the retention setting quietly deletes the comparison they wanted.
Updated September 2026