Privacy policy.
This policy explains what personal data PlushLab collects, why, and what you can ask us to do with it. The controller is TechCorner S.R.L., Str. Slt. Radu Teoharie, bl. D3, sc. B, et. 1, ap. 21, Târgu Neamț, Neamț County, Romania (Trade Register no. J2025025184003, VAT ID RO51592659). Questions and requests go to [email protected].
The waitlist and our updates
When you join the waitlist we store:
- your email address;
- when you agreed to be contacted, when you confirmed your email, and whether you unsubscribed from updates;
- which form you used and, if the link you followed had them, its campaign parameters (utm_source, utm_medium, utm_campaign).
We use this to confirm your address, to send you your invite, and to send you our updates — what we've shipped and news about the project, about once a month. The legal basis is your consent (Art. 6(1)(a) GDPR). You can withdraw it at any time: every update email has an unsubscribe link, or write to us and we delete your entry. Withdrawing consent doesn't affect what we sent before.
Using PlushLab
If you have an account, we process your name, email address, password (stored only as a one-way hash) and the content you and your team put into your projects, to provide the service you signed up for (Art. 6(1)(b) GDPR — performance of a contract). Each project is visible only to the people invited to it.
Security and abuse prevention
To keep the service safe, our servers process your IP address and basic request data (time, page, browser). The waitlist form uses your IP address to limit repeated sign-ups; it is held in memory for up to ten minutes and not stored. Server logs are kept for a short period, at most 30 days. The legal basis is our legitimate interest in protecting the service and its users (Art. 6(1)(f) GDPR).
Donations
Donations for the cats are collected through Buy Me a Coffee, which processes your payment and the details you give it as an independent controller, under its own privacy policy. We see the amount and anything you choose to share there, such as your name or a message. On this site we only show the total raised.
Cookies
The public pages set no tracking or advertising cookies. The app uses strictly necessary cookies: one that keeps you signed in and one that remembers your language. Our network provider may set a strictly necessary cookie to tell people from bots. Because none of these track you, they don't need your consent.
Who processes data for us
- Hosting: OVHcloud (OVH SAS), on servers in Germany, France and Canada.
- Network and security: Cloudflare, Inc., which delivers the site and protects it from attacks.
- Email delivery: Resend, Inc., which sends the confirmation, invite and update emails.
Some of these providers are based in, or may access data from, the United States or Canada. Transfers to the US rely on the EU–US Data Privacy Framework or the European Commission's standard contractual clauses; Canada is covered by an adequacy decision of the European Commission. We don't sell personal data or share it for advertising.
How long we keep it
- Unconfirmed waitlist entries: deleted after 30 days.
- Confirmed waitlist entries: until you're invited and decide whether to join, or until you ask us to delete them. Unsubscribing from updates stops the emails; ask us if you also want the entry deleted.
- Account data: for as long as the account exists, then deleted, except where the law requires us to keep records.
- Server logs: at most 30 days.
Your rights
You can ask to see, correct, export or delete your data, to restrict or object to its processing, and to withdraw consent at any time. Write to [email protected]; we answer within one month. You can also complain to your data protection authority — in Romania, the ANSPDCP (www.dataprotection.ro).
We don't make decisions about you by automated means alone, and PlushLab isn't meant for children under 16.
Changes
If we change this policy in a way that matters, we'll say so on this page and, if you're on the waitlist or have an account, by email before the change applies.