Privacy
Plotter lets people mark up websites, web apps, images, and designs, share feedback, and track changes together, in their browser or on iPhone and iPad. This page explains what Plotter collects, why, and what you can do about it.
Projects belong to a Plotter organization: a workspace used by an individual, a team, or a business. It may be your own organization or one that has invited you to give feedback.
What we collect
If you have an account: your email address, your name, and how you sign in (an email link, or an identifier from Sign in with Apple or Google). If you use Apple's “Hide My Email”, we only see the relay address Apple gives us. We keep a token for each device you're signed in on.
If you leave feedback from a link without an account: the name you type, your email if the project requires one, and a random key stored on your device so the same organization recognises you next time.
Your feedback: what you write or draw, which part of the page it's attached to, the page's address and title, and a screenshot of what you could see when you sent it. With it we record your device or browser, its version and screen size, and whether you used Pencil, a finger, a mouse or a pen tablet, so people working on the project can reproduce what you saw.
Voice notes, if you record one: the audio and a written transcript of it. On iPhone and iPad the transcript is made on your device; your voice isn't sent anywhere else to be transcribed.
Images and snapshots: images uploaded to a project for feedback, and snapshots of pages taken in the app or the extension. Fields with passwords, and parts of the page the site marks as private, are blanked before a snapshot leaves your device.
If you use the Plotter browser extension (Chrome, Edge, Brave, Arc or Firefox): it only works on a site after you start a review there and allow it access. On those pages it reads the page's structure and text to attach your marks to the right element, and sends your feedback as described above. It doesn't read other sites, and it doesn't record your browsing history. It keeps your sign-in for Plotter in the browser's extension storage, and you can disconnect it from its menu at any time.
Console messages, only if a project member turns them on: technical messages the website itself logged in the 30 seconds before you sent a mark. Email addresses, card numbers and access tokens are removed on your device before anything is sent, and again on our servers.
If an organization connects an AI assistant or coding tool (such as Claude or Codex): the tool uses a token an organization member makes in Plotter, and can read and resolve that organization's feedback, including yours, to apply it. Site builds it sends are hosted privately for review on plotter.cloud and are never public.
Staging details: if you provide a password for a protected test site, we store it encrypted and use it only to open that site for its reviewers.
If you try Plotter without an account (Try it on this page on plotter.run, Mark up this page in the extension, or any site in the iPhone and iPad app before you sign in): your notes, drawings, pictures and voice notes stay in your browser or on your device. Nothing is sent to Plotter. If you later sign in and choose to move them into a project, they're uploaded then and handled like any other feedback. Clearing them, or deleting the app, removes them.
Our website
When you first visit plotter.run, we ask whether we may use Google Analytics. If you choose Accept, it records which of our pages you view, how you arrived (such as a search, a link or a campaign), your browser and device type, and your approximate location (country and city). Google works out the location from your IP address but doesn't store the address. Google Analytics sets cookies (_ga) to tell visits apart. Our website tag disables advertising storage, Google signals and ad personalization. It sends public page addresses, the referring site's origin and predefined campaign labels; it does not send other query values, fragments, form entries or private review links.
If you choose Decline, or your browser sends a Global Privacy Control signal, Google Analytics doesn't load at all. You can change your choice at any time with Cookie settings at the bottom of any page. Declining stops collection on that page, removes Analytics cookies and reloads the page when the choice can be saved. A browser Global Privacy Control signal keeps Analytics off even after an earlier Accept choice. Your choice is kept in your browser.
Google Analytics runs only on plotter.run's own pages: this site and the help center. It never runs in the Plotter dashboard, the iPhone and iPad apps, the browser extension, review links, or the websites you review.
Who sees it
Your feedback stays with the project where you left it, whether you started that project or were invited to it. Access is controlled by the project's organization and sharing settings. If feedback is shared on a project, other reviewers of that project can see marks too. Plotter staff only look at your data to keep the service running or when you ask us to.
Services we rely on
How long we keep it
Your account data stays until you delete your account. Feedback stays with the project for as long as its organization keeps it, with these limits:
- Console messages are deleted after 30 days.
- Images marked as possibly containing customer data are deleted after 30 days; snapshots are marked that way unless a project member changes it. The marks on them stay.
- A Quick review (a member's private space for notes) is deleted after 30 days without use.
- A site build hosted for review on plotter.cloud is deleted after 180 days without activity; owners and admins are emailed 14 days before. The marks on it stay.
Owners and admins can download everything their organization keeps in Plotter (projects, marks, comments, screenshots, images and voice notes) from Organization settings → Export data.
Deleting your account
In the iPhone and iPad app, open the account menu and choose Delete account. On the web, go to Settings → Delete account. We remove your sign-in methods, name and email, sign you out everywhere, and, if you signed in with Apple, revoke Plotter's access with Apple. Feedback you already sent stays with the organizations whose projects you contributed to, without your name. To have feedback you left as a reviewer without an account removed, contact us.
Children
Plotter is a tool for individuals, teams, and businesses and isn't meant for children under 16.
Changes and contact
If we change this policy we'll update this page and the date above, and tell account holders by email about anything significant. Questions or requests: hello@plotter.run.