Privacy

What we keep, and why.

Almost nothing about the people in the room, and only what an account needs about the person running it.

Last updated 11 October 2026

The short version

  • People who join a session do not create an account. We never ask them for a name, an email address or a phone number.
  • There are no analytics, no advertising trackers and no third-party cookies on this site.
  • We do not sell or rent anyone’s data.
  • The only cookie keeps someone who runs sessions signed in.

If you join a session

You type a six-digit code and choose a nickname. That is everything we ask for. We keep:

  • Your nickname, your answers and your score in that session.
  • Any photo you upload in PhotoPulse. It is not shown to the room until the host approves it.
  • A note on your phone of which session you joined, so you can rejoin if the connection drops. It is cleared when you close the tab.

The host can save a report when the session ends, and that report lists nicknames alongside answers. Pick a nickname you are comfortable having on it.

If you run sessions

Creating an account means we keep:

  • Your name, your email address and, if you give it, your institution.
  • Your password, stored only as a one-way hash. Nobody at PlaPer can read it.
  • What you create: sessions, saved question sets, saved reports, and any documents you upload to have questions written from.
  • Feedback you send us, including a voice recording if you choose to make one, along with the page, screen size and browser it came from, so a problem can be reproduced.
  • When you last signed in, and a record of any password reset requests.

What it is used for

  • Running your sessions and keeping your reports.
  • Signing you in, and sending the emails an account needs: a welcome message and password reset links.
  • Fixing problems you report to us.
  • Preventing abuse, such as someone guessing session codes.

We do not use your documents, your questions or your participants’ answers to train AI models.

Who else handles it

A small number of companies process data for us, each only to provide one service:

  • Amazon Web Services runs the servers, which are in Mumbai, India.
  • Anthropic processes the topic you type or the document you upload when you ask for questions to be written. Nothing is sent to it unless you use that feature.
  • Resend delivers account emails to your inbox.
  • DigitalOcean ran the servers in Bangalore until October 2026 and still holds a copy of what was on them. That machine is being decommissioned, and this line goes when it does.

How long it is kept

  • Account details and saved reports: until you ask us to delete your account.
  • Uploaded documents: the forty most recently used for each account, plus any you have pinned. Beyond that, the ones you have not used for longest are deleted automatically.
  • Password reset links: they expire after an hour and work once.
  • Voice notes sent as feedback: until you ask us to delete them.
  • Web server logs, which record IP addresses as every web server does: fourteen days, then deleted.

Keeping it safe

  • Every connection to the site is encrypted.
  • Passwords are hashed, and resetting one signs your account out everywhere else.
  • Uploaded documents and voice notes are never published. They are served only to the account they belong to, or to us when dealing with a report you sent.
  • One host cannot see another host’s sessions, question sets or reports.

Your choices

You can ask to see what we hold about you, to correct it, or to have your account and everything in it deleted. Write to hello@plaper.in from the address on your account.

If you joined a session, we hold no contact details for you, so the quickest route is usually the person who ran it. You can also write to us with the session and nickname.

You have rights under the law where you live, including India’s Digital Personal Data Protection Act, 2023.

Young people

Accounts are for adults running sessions. People joining a session can be any age, which is exactly why we collect no personal details from them. If you run sessions with people under 18, you are responsible for doing so within your institution’s rules.

Changes to this page

If this changes, the date at the top changes with it. If a change affects what we keep about account holders, we will email them before it takes effect.

Contact

hello@plaper.in

Privacy · PlaPer