Privacy
Plonk is a room and space planning app. Sign in to save your layouts. Layouts (rooms, furniture, doors, windows, text annotations) live on our server. Share-links let others view a layout without an account.
Sign-in identity is managed by Lotl Auth. Layouts, rooms, items, and custom furniture templates live on our server. Telemetry goes to Lotl Observe.
What we collect
We collect and store the following kinds of data, each with its own retention and legal basis:
- Account: Your sign-in identity is managed by Lotl Auth, our authentication service (auth.lotlsoft.com). Lotl Auth stores your email, your name if you provided one, and a hash of your password (argon2id). Sign-in issues a short-lived JWT access token (15 minutes) and a refresh token (30 days). Email verification and password resets go through transactional email (Resend).
- Layouts, rooms, and items: Your saved layouts: rooms, furniture, doors, windows, powerpoints, and text annotations. Dimensions, positions, rotations, and custom furniture templates you create.
- Share and embed tokens: Tokens you mint to share a layout as a read-only view (`/share/:token`) or embed it elsewhere (`/embed/:token`). Anyone with the link can view; nothing about visitors is recorded.
- Usage telemetry: Page views, click events, and crash reports sent to Lotl Observe. Does not include the contents of your layouts.
Third parties
These external services receive some of your data:
- DigitalOcean — server hosting for the Plonk service
Your rights
You can export everything we hold about you, and delete your account at any time. Both options live in your account settings. Deletion is immediate and unrecoverable.
Last updated: 2026-07-30.