Privacy notice · draft

What PLOT stores about you

Everything the software keeps that could point at a person, and where it keeps it.

DraftThese privacy terms are a draft written by PLOT’s engineers and not yet reviewed or signed by counsel. They describe what the software does today and mark, in dashed boxes, every place a legal answer goes. Read them as a description of the product, not as advice and not as a statement about PLOT’s legal status anywhere. The dashed boxes and this notice come off when counsel signs.

1. Who is responsible

PLOT (soft open on enterplot.com) [counsel: controller’s legal name and address] [counsel: contact for privacy requests] [counsel: supervisory authority, if one must be named]

2. What is stored, and where

Your wallet address. The address you signed in with, and its link to the account PLOT made for you (wallets, wallet_links). It is the only identifier PLOT holds. It is pseudonymous, persistent, and publicly linkable to on-chain history. PLOT never asks for a name, an email, a phone number, a date of birth or a password; none exist on PLOT.

Your account. A handle PLOT generates (never derived from your address), a display name, a role, and - if an operator suspends the account, when and why (users).

Your sessions. The sign-in cookie’s hashed id, when it was created, expires and was revoked (sessions); and, under the geographic posture this host runs, the country a fronting network asserted for the connection you signed in from and the edge region that accepted it: a two-letter code, never your IP address, which PLOT does not record. On this host the country is recorded and trading or starting a PLOT is refused from KP, IR, SY, CU, RU, BY, US.

Your attestation. That you affirmed you are 18 or over and accepted the risk notice, the country you declared you live in, when, and which version of the words (version 2026-08-19.1), together with the country a fronting network asserted at that moment (attestations). Stored once per account per version; kept so the affirmation can be shown to have happened.

Sign-in challenges. Every sign-in attempt’s one-time message, your address, and when it was issued and used (auth_challenges). Marked used, not deleted.

What you publish. PLOT titles, objectives, proof, updates, images, objections, reports you file. Public the moment they are posted, attributed to your account, and kept permanently: the ledger, the audit trail and a PLOT’s record are append-only, and a moderator can withdraw content from publication but not erase it.

Your money history. On this host, every trade, holding, PAYOFF share and payout attributed to your wallet (trades, ledger_entries, payoff_settlements). On a chain host this is read from the public chain.

Aggregate page tallies. A count per page, never per person (page_view_counters). PLOT runs no analytics, advertising or third-party tracking in your browser; fonts are served by PLOT’s own build. Your browser keeps one cookie (plot_session, functional only) and a theme preference in localStorage that never leaves it.

What the host logs at its edge (connection logs at the hosting or CDN provider) is not controlled by this code and is not described here. [counsel: name the providers and their retention]

3. Why, and on what basis

To run the product you asked to use (sign-in, trading, publishing), to keep the record a market needs, to act on reports, and, for the country and attestation, to operate the geographic posture and the eligibility affirmation described in the terms. [counsel: legal basis per item]

4. How long

Indefinitely, today, for everything above: nothing in the software deletes a row. Sessions expire and are marked revoked; content can be withdrawn from publication. Pseudonymising the account row while the append-only history stays is a proposal, not a feature that exists yet. [counsel: retention periods; whether pseudonymising the user row satisfies an erasure request]

5. Your rights

[counsel: the rights that apply, and how to exercise each] Until then: use /report to reach an operator, with the wallet address the request is about. There is no automated decision-making about you on PLOT.

Everything you publish and every figure attributed to your wallet is public by design. PLOT shares nothing with advertisers and has no analytics provider. The hosting provider processes the bytes. [counsel: processors, transfers]

7. Changes