This policy explains what information Plotted collects when you use the map, create an account, or subscribe to Pro, and how that information is used, stored, and shared.
Plotted ("Plotted", "we", "us") operates the map and news-summarization service at app.plotted.live (the "Service"). This policy applies to everyone who visits the Service, whether or not you create an account.
Account information. When you sign up, our authentication provider (Supabase) stores your email, a hashed password, and the display name you choose. We separately keep a record tied to your account for subscription tier, view history, and billing identifiers.
Marketing preference. If you opt in at signup or in your account settings, we record that choice (and the time you made it) so we know who can be emailed product updates.
Payment information. If you subscribe to Pro, our payment processor (Stripe) collects and stores your card details directly — Plotted's servers never see or store your full card number. We keep only Stripe's customer and subscription identifiers, your subscription tier, and billing metadata (renewal date, amount, card brand/last 4 digits) needed to show your billing status.
Usage and analytics data. We record which map events you open, which filters you use, and general product events (e.g. hitting a usage limit). If you're logged in, this is tied to your account. If you're not, it's tied to a random session identifier stored in your browser's local storage — not to your identity. We also use Vercel's built-in analytics for aggregate page-view and performance metrics, which does not include personal information.
Cookies and local storage. We use secure, httpOnly cookies to keep you signed in — these cannot be read by JavaScript and are not used for advertising or cross-site tracking. We also store a random session identifier in local storage for anonymous usage analytics, described above.
We do not sell your personal information. We share it only with the service providers that help us run Plotted, each acting under their own privacy and security obligations:
We may also disclose information if required by law, to protect the rights and safety of Plotted or our users, or in connection with a merger, acquisition, or sale of assets — in which case we'll make reasonable efforts to notify affected users.
We keep your account information for as long as your account is active. If you delete your account, we delete or anonymize your personal account data within a reasonable period, except where we need to retain records for legal, tax, or billing purposes (for example, Stripe transaction history). Aggregate or anonymized usage data tied only to a session identifier may be retained longer, as it does not identify you.
Depending on where you live, you may have additional rights under laws like the GDPR or CCPA, including the right to data portability or to object to certain processing. We'll honor applicable requests to the extent required by law — contact us and we'll respond.
Plotted is not directed at children under 13, and we do not knowingly collect personal information from them. If you believe a child has provided us with personal information, contact us and we'll delete it.
We rely on industry-standard practices from our providers — encrypted connections, hashed passwords, and access-controlled infrastructure — to protect your information. No method of transmission or storage is perfectly secure, and we can't guarantee absolute security.
Plotted's infrastructure is hosted with U.S.-based providers. If you use the Service from outside the United States, your information will be transferred to and processed in the United States.
We may update this policy as the Service evolves. If we make material changes, we'll update the "Last updated" date above and, where appropriate, notify you directly.
Questions about this policy or your data? Email us at useplotted@gmail.com.