Privacy Policy

The short version

• —We do not sell your data. Not to anyone, for any price, ever. There is no exception buried further down this page.
• —There is no advertising and no tracking. PlotPoint contains no advertising network, no analytics service, no session recording and no third-party tracking pixels of any kind. We cannot tell you which pages you visited most, because we do not collect it.
• —Your library is yours. Your collection, ratings and notes are readable only by your own account. This is enforced by the database itself, not just by the app.
• —You can have it all deleted. Email hello@mg.plotpoint.ca and we will delete your account and its contents within 30 days.

What we collect

Everything below is either something you typed, something you chose, or something technically necessary to run the service.

• —Account details. Your email address, your username, and — if you set them — a display name and a profile picture. If you sign up with a password, that password is handled by our authentication provider and is never stored by PlotPoint in a form we can read.
• —Your collection. The titles you add, whether each is Saved, In progress or Completed, your rating out of ten, any notes you write, and the dates you added, started or completed something. Notes are free text, so they contain whatever you choose to put in them.
• —Preferences. Your email opt-ins, your default grid or list view, and which media types you have hidden.
• —Imported libraries. If you import from Goodreads, Letterboxd, Storygraph, Backloggd or MyAnimeList, we read the file you upload and create collection items from it. We keep the resulting items, and a note of which service each came from.
• —Support messages. If you send feedback, we store your message and its subject, along with your email address, your name, your browser or app version, and your browser user-agent string — so we can reproduce whatever you are reporting.
• —Waitlist signups. If you joined the waitlist before launch, we stored the email address you gave us and the date you gave it. Nothing else.
• —Push notification tokens. On mobile, if you allow notifications, we store the push token your device issues and an optional device name, so we can send the notification to the right device.
• —Technical request data. Our hosting provider processes the ordinary information any web server receives — your IP address, your browser user-agent and the address you requested. We use IP addresses in memory, briefly, to rate-limit signup and username checks against abuse. We do not record IP addresses in our database.

What we do not collect

We mention this because a list of what a service holds is only meaningful alongside what it does not.

• —Your date of birth or age.
• —Your location, whether precise or approximate. There is no location feature.
• —Your phone number.
• —Your contacts, calendar, photos beyond a profile picture you choose, or any other data on your device.
• —Any behavioural profile, advertising identifier, or cross-site tracking data. We have no means of building one.

Signing in with Google

If you choose "Continue with Google", Google tells us your name, your email address and your profile picture. That is the whole of it — we do not ask Google for access to your Gmail, your Drive, your contacts or anything else, and we could not read them if we wanted to.

We use those three things to create your account and show you as signed in. Google will also have its own record of the fact that you signed in to PlotPoint, governed by Google’s privacy policy rather than this one.

You can sign up with an email address and password instead, and never involve Google at all.

How we use what we collect

• —To run the service. Storing your library, signing you in, syncing between your devices.
• —To send you the emails you asked for. A welcome email when you join, and a confirmation if you joined the waitlist. You control these in Settings.
• —To answer you. If you write to us, we use your message and email address to reply.
• —To keep the service standing up. Rate limiting, abuse prevention, and diagnosing faults.
• —To decide what to build. In aggregate, and never by reading individual libraries for product ideas.

Who else processes your data

We use a small number of service providers to operate PlotPoint. They act on our instructions, and each one only receives what it needs to do its job.

• —Supabase. Our database, authentication and file storage. Holds your account, your library and your profile picture.
• —Vercel. Hosts the website and processes the ordinary web-request data described above.
• —Google. Only if you choose to sign in with Google.
• —Resend and Mailgun. Send our email. They receive the recipient address and the contents of the message.
• —Expo, with Apple and Google. Deliver mobile push notifications, if you have turned them on. They receive your push token and the text of the notification.

Where your searches go

PlotPoint does not have its own catalogue of every film and book ever made. When you search, we ask an outside source — TMDB for films and television, IGDB for games, ISBNdb and Open Library for books, and OMDb for review scores.

Those requests are made by our servers, not by your browser, and they carry only the words you searched for. Your name, your email address and your account are not attached, so none of those services can build a picture of what you personally are looking for.

Cover art and posters are a partial exception: those images are served to your browser directly from the source, so the service hosting an image can see your IP address, as it would for any image on any website.

Cookies and local storage

PlotPoint sets one kind of cookie: the session cookie that keeps you signed in. It is strictly necessary to use an account, it is not shared with anyone, and it is not used to track you. That is why you have not been asked to accept cookies — there are no optional ones to accept.

We also use your browser’s own storage to remember your progress through the onboarding flow and your interface preferences. That data stays on your device.

What other people can see

Today PlotPoint is a single-player product. Your profile, your collection, your ratings, your notes and your insights are visible only to you, enforced by database-level rules rather than by the interface alone.

One thing genuinely is public: if you upload a profile picture, the image file is stored at a public web address. Nothing links to it and it is not indexed anywhere, but anyone who has the exact address can view the image. Please do not upload a picture you would not want seen.

We intend to add social features — public profiles, following, sharing — at some point. When that happens, we will say clearly what becomes visible before it becomes visible, and it will not be applied retroactively to anything you have already saved without telling you first.

How long we keep it

• —Your account and library. For as long as your account exists, and then deleted when you ask us to delete it.
• —Waitlist emails. Until launch is done and the list has served its purpose, or until you ask us to remove you.
• —Support messages. Kept while we deal with the issue and for a reasonable period afterwards, so we have the history if it recurs.
• —Backups. Deleted data can persist in our provider’s routine backups for a short period after deletion before ageing out.

Your rights, and how to use them

PlotPoint has no self-service delete or export button yet. Rather than pretend otherwise, we handle these by email: write to hello@mg.plotpoint.ca and we will act within 30 days.

You can ask us to:

• —Delete your account. Your profile, library, notes, preferences and support history go with it.
• —Send you a copy of your data. In a machine-readable file.
• —Correct something. Though most of it you can edit yourself in the app.
• —Stop emailing you. You can also change this yourself in Settings at any time.

Children

PlotPoint is not intended for children under 13, and you need to be at least 13 to have an account. We do not ask your age, so we cannot claim to enforce this at signup. If you believe a child under 13 has an account, email hello@mg.plotpoint.ca and we will delete it.

Where your data is held

PlotPoint is operated from Canada, and our hosting and database providers store data on servers that may be located in the United States or elsewhere. Data protection law in those countries differs from your own. By using PlotPoint you accept that your data is processed in those locations.

Security

Your data is transmitted over encrypted connections, passwords are hashed by our authentication provider and never visible to us, and access to your rows is restricted at the database level rather than only in the application.

No service can promise perfect security, and we will not. If we discover a breach affecting your personal data, we will tell you and the relevant authority as the law requires.

Changes to this policy

If we change this policy in a way that materially affects you, we will update the effective date at the top and, for significant changes, tell you by email or in the app. Continuing to use PlotPoint after a change means you accept the updated policy.

Contact

This policy is issued by PlotPoint. For any privacy question, request or complaint, email hello@mg.plotpoint.ca. If you are in Canada and we have not resolved your concern, you may complain to the Office of the Privacy Commissioner of Canada.