Privacy
Plan afoot is built to help you plan hard things — not to mine your data. Here is exactly what we collect and why.
What we collect
- Your email address. We collect your email when you sign in. We use it exclusively to authenticate you, to send invitations, and to send system or billing notifications. Your email is never displayed to other users.
- Usage analytics (cookieless). We use Cloudflare Web Analytics, which counts page views and measures page performance without cookies and without tracking you across other websites. It does not identify you.
- Product analytics. To understand whether the app is actually helping people plan hard things, we send anonymous usage events — for example, that a quest was started or a first task was added — to PostHog, Inc., a US-hosted analytics processor. These events are keyed to your account id only: we never send your name, email, or handle, and never your quest, plan, or task content.
- Operational logs. Like any web service, our servers keep technical logs (e.g. errors) for diagnostic purposes. These never include any identifiable information about you beyond a numeric user id, and never your quest, plan, or task content. This operational data is used exclusively to keep the site working well.
- Error reports. When something breaks, we send a scrubbed error report to PostHog for diagnosis. These reports are stripped of your quest, plan, and task content and of any entity ids before they leave our servers, and are keyed to your account id only. We also send Content-Security-Policy violation reports — a browser security signal, never your content — to the same processor.
What we do not do
- We do not sell or share your data.
- We do not use advertising or marketing trackers.
- We do not track you across other websites.
- We do not build a behavioral profile that identifies you by name, email, or handle — product analytics are keyed to your account id only.
- We do not use session replay. Recording your screen or interactions is explicitly turned off in the analytics tool we use, and cannot be switched on without a code change.
Your content
Your quests, plans, and tasks are yours.
No site administrator has access to any quest unless you invite them. Once invited, an administrator has exactly the same permissions as any other member you invite — no more — and no special, behind-the-scenes access to your content.
Deleting your account
When you delete your account, everything that identifies you is scrubbed — your name, email, and profile are erased. The one exception is your handle, which we keep solely for anti-abuse purposes (to prevent ban evasion and sockpuppeting). It is retained for no other reason and is never used to profile or contact you.