Privacy notice

Browsing PlotRecall is anonymous. There is no sign-up, no profile and no identifier that follows you between visits. Your stopping point and recall depth are held in the page while you use it and are not persisted.

Search queries are processed to produce results. They are not attached to an identity, and no query log is published or sold.

No advertising identifier, no behavioural profile, no viewing history, no contact details unless you type them into a request form, and no data about children collected knowingly. PlotRecall is a general-audience reference product and is not directed at children.

A hosting provider will record ordinary request logs, such as IP address, user agent and the page requested, for security and reliability. PlotRecall does not use those logs for profiling. Retention is controlled by the hosting provider and is not yet configured by PlotRecall; that configuration is a launch item.

If you report an error, raise a rights complaint or make a data-rights request, we keep what you typed, the page it concerned and — only if you gave one — your email address, so a reviewer can assess it and reply. Submitted text is private: it is never published on this site, in any state, including after a report is accepted. Where the report is about a spoiler, we record the position you had selected and the part of the page you were reading, not the spoiler itself.

Reports are kept while the case is open and afterwards as a record of what was decided and why. That record is what stops the same error being reintroduced.

There are no public accounts today. Where an account exists, we keep the account identifier, authentication and session data needed to keep you signed in, and a record of which version of the Terms you accepted and when. Optional consents, such as marketing email, are recorded separately from that acceptance so that withdrawing one does not touch the other.

PlotRecall sets no cookies of its own. The complete register of client-side storage is below, and the cookies and consent page explains the categories.

• plotrecall.studio.operator — Holds the selected Studio operator for the internal backoffice simulation. Never set on a public page. (sessionStorage, strictly necessary).
• plotrecall.consent — Records your own consent decision so you are not asked again. Written only after you choose, and only when a consent-requiring category is configured. (localStorage, strictly necessary).
• _ga / _ga_* — Google Analytics measurement, set only when a measurement id is configured and analytics consent is granted. Absent otherwise. (cookie, analytics).
• (in-page state) — Spoiler boundary and recall depth live in React state for the duration of the page view and are not persisted. (memory, strictly necessary).

No analytics is running on this build. No analytics library, tag manager or measurement script is loaded. If aggregate analytics are switched on, this section names the provider and a consent choice appears first.

Advertising is switched off and no provider script exists on the page. Because nothing consent-requiring loads, PlotRecall shows no cookie banner rather than a decorative one.

If an optional provider is ever enabled, a consent choice will appear first, with nothing pre-ticked and no dark pattern.

Outbound commerce links are marked and use rel="sponsored nofollow noopener". When affiliate mode is enabled, the destination merchant may record that the visit came from PlotRecall. See the affiliate disclosure.

Today the only third parties in the request path are the hosting provider that serves this site and the font service referenced by the stylesheet. Any additional processor — analytics, advertising, email delivery or a database host — will be named here before it is used.

You can ask what data is held about you, ask for it to be corrected or deleted, withdraw a consent, or object to a purpose. Use the rights request route. Because there are no accounts, in most cases the honest answer will be that nothing is held.

PlotRecall is designed to support obligations of this kind — notice, minimisation, purpose limitation, correction, deletion and provider disclosure. It does not claim certified compliance with the GDPR, India's DPDP Act or any other statute; that requires legal review, which has not yet happened.

A future version may let you record what you have watched. That data will be private by default: never public, never indexed, never shown in another person's account and never handed to an advertiser as viewing history. The feature does not exist yet.

This policy will change as the product grows. Material changes will be dated on this page.