diff --git a/README.template b/README.template
index 39f6fbe..8196743 100644
--- a/README.template
+++ b/README.template
@@ -43,7 +43,7 @@ My lab functions as a live production environment where threat intelligence, aut
 - **Retention:** 
   - 24 hours for lower confidence scenarios  
   - 14 days for high-confidence IOCs  
-  - 30 days for offender watchlist
+  - 7 days for offender watchlist
 - **Notification:** High-severity events dynamically pushed to Discord.
 
 ---