Privacy Policy
Last updated: April 15, 2026
Plannotator is a local-first, open source project. The core Plannotator experience runs on your machine.
This Privacy Policy explains what data may be processed when you use:
- https://plannotator.ai
- https://share.plannotator.ai
- any hosted sharing or short-link services we operate
1. Contact
Michael Ramos
Email: backnotprop@gmail.com
2. What this policy covers
This policy covers our website and hosted sharing services.
This policy does not cover:
- your local use of Plannotator on your own machine, except when you choose to use our hosted sharing features
- third-party tools or model providers you use locally, such as ChatGPT, Codex, Claude Code, or others
- self-hosted deployments run by you or your organization
3. How Plannotator works
Plannotator is designed to run locally. We do not host your normal day-to-day planning workflow.
Our services are only involved when you use our website or choose to use hosted sharing features.
For hosted sharing:
- smaller shares may be encoded directly in the URL
- larger shares may be stored temporarily in encrypted form behind a short link
- if you self-host the sharing services, your deployment is separate from ours
4. What we collect
We try to collect as little as possible.
a. Shared plan data
If you use hosted sharing for larger plans, we may temporarily store an encrypted version of the shared plan so the short link can work.
We do not store unencrypted shared plan contents through that flow.
We do not store the decryption key. Because the key is not stored by our hosted service, we cannot access the unencrypted contents of shared plans through this flow.
b. Basic infrastructure data
Our hosted services rely on infrastructure providers such as AWS, CloudFront, and Cloudflare. As a result, limited technical data such as IP addresses or request metadata may be processed by those providers as part of delivering the service.
We have configured logging services to be turned off to the extent supported by those providers and services.
c. Contact information
If you contact us directly, we may receive your email address and the contents of your message.
5. What we do not collect
- We do not use tracking cookies.
- We do not use analytics cookies.
- We do not store analytics data.
- We do not store telemetry about your local Plannotator usage.
6. Cookies and local storage
We may use cookies or similar local storage only where needed for the app to function, such as remembering settings, preferences, or theme choices.
We do not use cookies for advertising or analytics.
7. How we use information
We use information only as needed to:
- serve the website and hosted sharing features
- deliver shared content through short links
- keep the service functioning and secure
- respond to support or contact requests
- comply with legal obligations
8. Third parties and subprocessors
Our hosted services may rely on third-party infrastructure providers, including:
- AWS
- Amazon CloudFront
- Cloudflare
These providers may process limited technical information as part of operating and delivering the service.
9. Retention
Encrypted shared payloads are retained only as long as needed for the hosted sharing flow to work.
Contact emails or support messages may be retained as needed to respond to you and keep basic records of those conversations.
We may retain information longer if required for security, abuse prevention, or legal compliance.
10. Your choices
You can avoid our hosted services entirely by:
- using Plannotator locally without hosted sharing
- self-hosting the sharing services
- disabling sharing features
If you are working on sensitive, regulated, or confidential projects, we recommend self-hosting or disabling hosted sharing.
11. Security
We take reasonable steps to limit the data processed by our hosted services. However, no website or internet-based system can offer perfect security.
For sensitive or regulated use cases, self-hosting is the safest option.
12. Your rights
Depending on where you live, you may have rights to request access to, correction of, or deletion of personal information we hold about you.
To make a privacy request, email: backnotprop@gmail.com
Because Plannotator is primarily local-first, and because some hosted shared data may be stored only in encrypted form, our ability to identify, access, or act on some data may be limited.
13. Changes to this policy
We may update this Privacy Policy from time to time. If we do, we will update the "Last updated" date above.