Privacy

The objects are public. The people are not. Everything below follows from that one idea, and none of it is written to be clever.

You do not need an account

Reading a PLIPPET's page, a creature, a collection or the map asks nothing of you. An account only exists so you can do the things that are yours: claim one that has reached you, name it, add a moment to its journey, or hand it on.

What other people can see

Your username is public. It is how a PLIPPET's page says who is looking after it, so it appears to anyone reading that page, signed in or not. You can choose not to be named there, and the page will say somebody is looking after it without saying who.

Your email address is never shown to anyone, anywhere. Your own profile page is behind a sign-in, is marked so search engines do not index it, and is disallowed in robots.txt — this site does not become a directory of people.

Where a PLIPPET has been

A journey moment can carry a place. What the map and the timeline show is the town or the region, never the address — a moment added at home shows the town it sits in, and the precise location is not stored on the public record at all.

When a tag is scanned

Scanning a tag records that it happened, because that is what proves somebody was physically holding the object. Your IP address and browser are turned into a one-way hash before anything is written down — the originals are never stored — and the record is deleted after ninety days.

Your account is yours

You can edit what you have written at any time from your settings, and you can ask for a copy of everything: a file of your data together with the photographs you have added, sent to you as a link that works for twenty-four hours.

Closing your account removes you rather than the objects. Your email, your username, your photograph and anything you wrote about yourself are deleted. The PLIPPETs you held keep their history, because it belongs to them as much as to you — those entries simply stop carrying your name and say a previous owner added them.

How long things are kept

• Tag scans — 90 days
• Expired transfer and meeting links — 30 days
• Notifications — 12 months
• The record of moderation decisions — kept

Cookies, and the banner you are not getting

Only the cookies that make signing in work. There is no analytics on this site and nothing follows you around it, which is why there is nothing here asking you to accept anything. If that ever changes it will be behind a choice you make, not a banner you dismiss.

Other companies

One: a geocoding service that turns a place you pick into a town name. Your browser never talks to it — this site asks on its behalf, so nothing about you reaches them. The fonts and everything else on these pages are served from here.

Getting in touch

hello@plip.pet — for a question about any of this, a correction, or to ask for a copy of what is held about you. It is read by a person, not a queue.