What we keep about you

If you only look around

We count visits without knowing who you are. A random id stays in your browser so we can tell a returning visit from a new one; it holds no name, no address and no IP address. We also keep counts of which countries are opened and which buttons are pressed, never what you typed in a search. Vercel Analytics measures traffic in aggregate.

Once a visit we also note how smoothly the planet ran: a speed band, the quality level it started on, and whether the window was a phone, a tablet or a desktop. If something breaks we note the kind of failure, never its text or the page address. This is how we find out that the planet is slow or broken for people.

Your browser's Do Not Track and Global Privacy Control settings are honoured. Add ?analytics=off to any address to switch counting off on this device, and ?analytics=on to bring it back.

If you become a citizen

You sign in with Google, once, so that a citizen is one person. We keep:

• the email address of your Google account, to recognise you when you return. It is never shown to anyone;
• the face you picked, the unique username you chose, and your citizen number;
• the country and state you stand in, and the point on the planet where your figure stands;
• your age band (under 13, 13 to 17, or 18 and over), worked out from the month and year of birth you give. The month and year themselves are not kept. Only people aged 18 and over can become citizens; a younger answer closes the account and nothing is kept;
• the version of the rules you agreed to, and when you agreed.

Your Google name and photo are not stored. What other people see is your face, your username, your citizen number and your country and state.

What you put on the planet

• Stories: the text, its kind, the place and the year you give. A story is public and shows the place and your Planet-X username, never your Google name or your email. Stories may not contain links, addresses, e-mail addresses or phone numbers.
• Memories: the name, dates and dedication of the person you remember, and a photo if you add one. These are public. Only add someone you are free to remember, and remove a memory whenever you like. A photograph is sent to OpenAI for an automatic safety check before anyone can see it; if the check is unavailable it waits, private, until it can be repeated, and the picture is kept only if it passes.
• Banners: your advert, your business details and the orders you place. Card details are handled by our payment provider, Dodo Payments, and never reach us.

We keep the address of the account that made a memory or a banner so that you can manage it later. It is held out of view of the public site; we are moving it into a separate private store.

Stopping abuse

To limit spam, a scrambled form of your device id is stored with what you post or report. It counts and throttles; it is never used to identify you, and it cannot be turned back into the id.

Who else handles it

• Google, to sign you in.
• Supabase, which stores the data.
• Vercel, which serves the site and measures traffic.
• Dodo Payments, for banner payments.
• OpenAI, for the safety check on memorial photographs.
• Sightengine, for a nudity check on photographs before anyone can see them.
• Resend, which sends the emails you get from Planet-X.
• GIPHY, and KLIPY when GIPHY is not answering, only when you search for or post a GIF in a squad. They receive the words you search for and nothing that identifies you.

We do not sell your data and we do not show you advertising based on it.

Your choices

Both live at Settings, Your data (/settings/data).

Request a download asks for a file of everything you have put on Planet-X. It is a request: a link to the file arrives in your Inbox within a day. The file holds your account email, your age band and rules agreement, your profile and citizen, your stories, memories and banners with their orders, your World Question answers, your Inbox (without other people’s words), your notification and other settings with the places you signed in from, the posters you made and the posters of you, your squad memberships with your own posts, replies and activities, your secrets, your Quote Passport, your One orbit and any Plus plans. It never holds what other people wrote, or a card number.

Delete my account deletes your citizen, your stories, your memories, your banners and everything else you made 14 days after you ask, and any payment stops at once. Until then, choose Keep my account to cancel. Squads you organise must be handed over first. Payment records held by Dodo Payments stay with Dodo.

Anything else you want corrected or removed, write to hello@planet-x.world.

Changes and questions

When this page changes, the date above changes. Questions and complaints go to hello@planet-x.world; see Contact for how we answer.