Privacy policy

Last updated 29 October 2026

This policy explains what information Plotmast collects, why, and what we do with it. Plotmast is made by Battle Candy Studios LTD, a company registered in England and Wales (“we”, “us”). We are the data controller for the information described here. If you have any questions, email privacy@plotmast.com.

The short version

• Your stories stay on your own computer or in your browser unless you choose to work on one together with other people.
• If you sign in (to work together, or to use what you've bought), we receive your name, email address and an account identifier from Google or Microsoft, and nothing else from them.
• If you buy Plotmast, Paddle takes your payment. We never see your card or bank details.
• We don't sell your information, show you adverts, or use tracking cookies or analytics.

Using Plotmast on your own

When you use Plotmast's editor, your stories are kept on your device: in the folders you choose, or in your browser's own storage. We don't receive them. Your browser also keeps a few settings on your device (such as your name and colour on notes), which we don't receive either.

Some versions of Plotmast let you connect AI assistants that you have installed yourself (such as Claude Code or Codex). They run on your computer under your own accounts with those services, and what you share with them is covered by their own terms and privacy policies. We don't receive it.

Signing in with Google or Microsoft

To work on a story together with other people, you sign in with your Google or Microsoft account. When you do, we ask only for the basic sign-in permissions (openid, email and profile) and receive:

• your name,
• your email address,
• the identifier Google or Microsoft gives your account.

We use these only to sign you in, to show your name to the people you work with, and to check whether your account may start rooms. We don't ask for, or have access to, anything else in your Google or Microsoft account (such as your email, files or contacts).

After you sign in, a sign-in token is kept on your device for up to 30 days so you stay signed in. Signing out removes it. You can also remove Plotmast's access at any time from your Google account's permissions or your Microsoft account's app permissions.

Google user data. Plotmast's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We don't use information from Google for advertising, we don't sell it, and we don't use it to train AI models.

Buying Plotmast

Our online shop is run by Paddle.com, our reseller and the Merchant of Record for every order. Paddle takes your payment and handles invoices, tax, refunds and billing questions, as an independent controller of the information it needs for that under its own privacy policy. We never see your card or bank details.

From Paddle we receive what we need to give you what you bought and to help you with it: your name, email address, country, what you bought and when, whether a subscription is running, and the identifiers Paddle gives you and your order. If you sign in when you buy, we link your purchase to your Plotmast account so your licence reaches your copy of Plotmast.

We keep records of purchases for as long as the law requires us to (usually six years, for tax).

Your stories on Plotmast's servers (Cloud)

If you have Cloud or Team, the stories you choose to keep on Plotmast's servers are stored there so you can open them on your other devices. We keep them until you delete them, or for 90 days after your subscription ends so you can take copies, and then delete them.

Working on a story together

When you start working on a story together, the story is put in a “room” on our servers so that the people you give its link to can open and change it with you. We keep:

• the story itself, as it is in the room (its pages, lines, notes and pictures),
• who started the room (their account identifier),
• a scrambled copy (a hash) of the room's key, never the key itself.

While you're in a room, your name, colour, which page you're on, your pointer and what you've picked are passed to the others in it as they happen. They aren't stored.

Notes in a story show who wrote them, by the name and colour you choose. Anyone with a room's link can see the story in it, so give links only to people you trust.

Our website and servers

This website doesn't use cookies, analytics or trackers. Our website and rooms run on Cloudflare, which processes technical information such as your IP address to deliver them and keep them secure. We may keep logs of what our servers do (for example, errors and who connected to a room) for a short time to keep the service working and to investigate misuse.

Who else handles your information

• Cloudflare, Inc. hosts our website and rooms, and stores the stories put in rooms, on its global network. Cloudflare acts as our processor.
• Google or Microsoft sign you in, if you choose to sign in with them. Their own privacy policies apply to your accounts with them.
• Paddle.com sells Plotmast for us and takes payments, as described above.

We don't share your information with anyone else unless the law requires us to.

Where your information is kept

Cloudflare may process and store information outside the UK. Where it does, it's protected by Cloudflare's data processing terms, including the safeguards UK data protection law requires.

How long we keep it

We keep your account details while you use Plotmast's rooms, and a story in a room until the room is stopped or you ask us to delete it. Server logs are kept for a short time and then deleted. Email privacy@plotmast.com to ask us to delete your information or a room's story.

Our legal basis

Under UK data protection law, we use your sign-in details, your purchases and the stories you put on our servers to provide what you've asked for (performing our contract with you), keep purchase records because the law requires it, and keep server logs in our legitimate interest in running a secure, working service.

Your rights

You can ask us for a copy of your information, to correct it, to delete it, or to stop or limit our use of it, and you can object to how we use it. Email privacy@plotmast.com. If you're unhappy with how we've handled your information, you can complain to the UK's Information Commissioner's Office (ico.org.uk).

Children

Plotmast isn't meant for children under 13, and we don't knowingly collect information from them.

Changes to this policy

If we change this policy, we'll update it here and change the date at the top. If a change matters, we'll tell you in Plotmast before it applies.

Contact

Battle Candy Studios LTD
privacy@plotmast.com