Privacy policy

This policy explains what personal information Plinth, the website builder at plinth.noonbarbari.xyz, collects, why, and what you can do about it. Websites made with Plinth have their own privacy notice; this one is about Plinth itself.

Who is responsible

The person running this Plinth hasn’t filled in their name, postal address, contact email yet.

The operator of this Plinth

Your account

To create an account we need your email address and a password. We store the password only in a scrambled form (a hash) that can’t be turned back into the password. We use your email address to sign you in, to send you password reset links and security notices, and, if you turn on contact forms, to tell you about new messages. This is necessary to provide the service you signed up for (Article 6(1)(b) GDPR).

Your websites and photos

Plinth stores what you put into your sites: text, settings and the photos you upload, so that you can edit them and publish them. Published sites are public by design. Don’t put other people’s personal information on a site unless you’re allowed to.

AI writing

When you ask Plinth to write or rewrite something, the text needed for that request (such as your business description, location, the section you’re editing, or a blog post topic) is sent to Anthropic PBC, based in the USA, which makes the Claude AI models. Photos are never sent. This means that text is transferred to the USA. Anthropic processes it under its own terms and privacy policy. Leave personal details about other people out of these requests. You can build and edit a site without using AI at all.

Cookies

Plinth sets one cookie, plinth_session, which keeps you signed in for up to 30 days. It’s needed for the service to work, so it doesn’t need your consent. Plinth has no analytics, advertising or tracking cookies or scripts, and doesn’t load fonts or scripts from other companies.

Server logs

Like every web server, ours receives your IP address and some details about your browser with each request. A security log keeps them for up to 8 days to protect Plinth from attacks, then deletes them.

Your website’s visitors

For people who visit or contact a website made with Plinth, the site’s owner is responsible, and Plinth processes their data on the owner’s behalf (see section 7 of the terms of use). Visitors are counted without cookies, and their IP addresses are kept only in the security log described above. Messages sent through a site’s contact form are stored in the owner’s account and deleted automatically after the period the owner chooses (12 months unless they change it).

Who else handles the data

We use these service providers. They only get what they need to do their job for us:

• OVH GmbH, Germany, which runs the server Plinth and the published websites are on
• Anthropic PBC, based in the USA, which makes the Claude AI models, for the AI writing features
• Brevo, an email service based in France, which delivers Plinth's emails

We don’t sell personal information or use it for advertising.

How long we keep it

We keep your account, sites, photos and messages until you delete them or your account. Deleting your account removes everything from the server straight away, including your published websites. Backup copies are deleted within 14 days after that.

Your rights

You can, at any time:

• download all your data (account page, “Download your data”)
• correct your email address (account page)
• delete your account and everything in it (account page)
• ask us what we hold about you, ask us to restrict how we use it, or object to it, by writing to the contact details above

If you think we’ve handled your data wrongly, you can complain to the data protection authority where you live.

Changes

If we change this policy in a way that matters, we’ll tell you by email before the change takes effect.