Privacy Policy
Last updated: April 8, 2026
Who we are
Plinth ("we", "us", "our") is an AI-native website builder operated by Plinth. Our website is plinth.page and our dashboard is at app.plinth.page.
What data we collect
Account information
When you sign up, we collect your email address. This is used for authentication (magic link login), transactional emails (domain setup, team invitations), and billing communications. We do not collect your name, address, or phone number.
Site content
Files you upload or create through Plinth (HTML, CSS, images, etc.) are stored in Cloudflare R2. These files are the content of your websites and are accessible at your site's public URL.
Analytics
We use PostHog for product analytics. We track usage events (tool calls, page views, feature usage) tied to your anonymous user ID. We do not send your email address or other personally identifiable information to PostHog. PostHog may set cookies for session tracking on the dashboard.
Site visitor analytics
If you use Plinth's built-in analytics, we collect aggregated, anonymous data about visitors to your sites: page views, referrers, countries (derived from IP), and device types. Visitor IP addresses are hashed and never stored in raw form. No cookies are set on your visitors.
Form submissions
If you add contact forms to your site, submission data is stored in our database and forwarded to your notification email. IP addresses of form submitters are hashed for spam prevention and never stored raw.
Payment information
Payments are processed by Stripe. We do not store credit card numbers. Stripe collects payment details directly. We store your Stripe customer ID and subscription status in our database.
Domain registration
If you purchase a domain through Plinth, we register it on your behalf via Porkbun, an ICANN-accredited domain registrar. The following applies:
- WHOIS privacy: Free WHOIS privacy protection is enabled on all domains registered through Plinth.
- Data sent to Porkbun: The domain name you purchase and DNS record configurations. Porkbun's privacy policy is available at porkbun.com/legal/privacy_policy.
- ICANN requirements: Domain registrations are subject to ICANN policies. See ICANN Registrant Rights & Responsibilities.
- Porkbun is the sponsoring registrar for all domains purchased through Plinth.
Third-party services
We share data with the following services to operate Plinth:
- Cloudflare (hosting, CDN, DNS, database) — your site files, database records, and request metadata
- Stripe (payments) — your email address and payment details
- Resend (transactional email) — your email address and email content
- PostHog (product analytics) — anonymous usage events, no PII
- Porkbun (domain registration) — domain names and DNS configurations
- Unsplash (stock photos) — search queries when you use the image search feature
How we use your data
- To provide and maintain the Plinth service
- To authenticate you and secure your account
- To process payments and manage subscriptions
- To register and manage domains on your behalf
- To send transactional emails (login links, domain setup, expiration reminders)
- To improve the product based on aggregate usage patterns
We do not sell your data. We do not use your data for advertising. We do not train AI models on your site content.
Data retention
- Account data: Retained while your account is active. Deleted upon request.
- Site content: Stored in R2 while the site exists. Deleted when you delete the site.
- Analytics events: Retained in PostHog per their retention policy.
- Domain registrations: Records retained for the life of the domain registration.
Your rights
You can:
- Access your data by logging into the dashboard
- Delete your account and all associated data by contacting help@plinth.page
- Export your site files at any time through the dashboard or API
- Inquire about what personal data we hold by emailing help@plinth.page
Cookies
We use essential cookies for authentication (session cookies on the dashboard). PostHog may set analytics cookies. We do not use advertising or third-party tracking cookies. Your published sites do not set any cookies unless you add them yourself.
Security
Data is encrypted in transit (HTTPS everywhere) and at rest (Cloudflare infrastructure). Authentication uses magic links — no passwords are stored. OAuth tokens are stored securely in our database.
Children
Plinth is not directed at children under 13. We do not knowingly collect data from children.
Changes
We may update this policy. Material changes will be communicated via email or dashboard notification.
Contact
Questions about privacy? Email help@plinth.page.