1Information we collect
We collect information you give us, information collected automatically when you use Plutura, and a limited amount of information from services you choose to connect. We collect only what we need to run Plutura and the features you use.
- Information you provide (name, email, password, preferences)
- Information collected automatically (device, browser, pages viewed, approximate location)
- Information from third parties (e.g. sign-in providers such as Google)
2Notice at collection
HIMMELYS LLC, doing business as Plutura Media, is responsible for the personal information described in this policy. This section summarizes what we collect, where it comes from and why, as some state privacy laws require.
We do not sell personal information or share it for cross-context behavioral advertising. We disclose it to the providers listed in “Service providers and data sharing” and keep each category only as long as described in “Data retention”. Information a feature needs, such as an email address for an account or the newsletter, is required to use that feature; reading Plutura does not require an account.
Depending on the features you use, we collect these categories of personal information:
- Identifiers and contact details, such as your name, email address, account ID and IP address: from you and your device, to run your account, send email you asked for, answer you and protect Plutura
- Sign-in information, such as your password (kept only as a secure hash) or your Google sign-in: from you, and from Google if you choose it, to let you sign in securely
- Membership and transaction records, such as your Plutura Plus status, plan, dates and receipts: from you and from Polar, to provide Plutura Plus and keep accounting records
- Internet and device activity, such as the pages you view and how you interact with them, your browser and device type, and the security signals our forms check: from your device, through cookies and similar technologies, to run, measure, secure and improve Plutura
- Approximate location, worked out from your IP address: from your device, for security, analytics and privacy settings that depend on your region
- Content you submit, such as comments, messages to us and questions to Plutura AI: from you, to provide those features, moderate comments and answer you
- Preferences and inferences, such as the interests you choose and the articles you save: from you, to suggest articles you may like
- Sensitive personal information: your account sign-in credentials, and anything sensitive you choose to include in comments, messages or questions, as explained in “Sensitive information”
3Account information
When you create an account, we store your first name, your email address and how you sign in: a password, which we keep only as a secure hash, or Google sign-in. We also keep what you choose to save on Plutura: saved articles, the interests you select, your comments and your email preferences.
If you join Plutura Plus, we keep your membership status and history. Payments are handled by our payment provider, Polar; we never receive or store your full card details.
4Plutura AI and chat data
When you ask Plutura AI a question, the question, the page you asked it from and relevant passages of Plutura articles are sent to our AI provider, Anthropic, to generate the answer. Anthropic processes this information on our behalf and, under its commercial terms, does not use it to train its models.
As a guest or free member, your conversations are not saved as a history you can return to: each one starts fresh. As a Plutura Plus member, your conversation history is saved so you can return to it; it is hidden if your membership ends and deleted when you delete your account. To apply daily limits we keep usage counts, and to understand what readers want to read about we keep a general topic line without names or other personal details. Please do not include sensitive personal information in your questions.
Not keeping a history does not mean a question is never processed or briefly stored. Anthropic acts as our service provider and, under its commercial terms, generally deletes questions and answers within 30 days, but may keep them longer when needed to enforce its usage policies or to comply with the law. We also keep records of attempts to misuse Plutura AI, to protect the service. By sending a question to Plutura AI, you agree that it will be sent to and processed by Anthropic as described in this section.
- Questions and responses in a conversation
- The article or page a question was asked from
- Usage counts used to apply guest and member limits
5Public comments
Comments you post, and the name shown with them, are public: anyone can see them, other readers can copy them and search engines may index them. Do not include private or sensitive information about yourself or anyone else. You can delete your own comments or ask us to remove them at [email protected]. Removing a comment from Plutura does not remove copies that others have already made.
6Sensitive information
Some information is treated as sensitive under privacy laws. We collect account sign-in credentials (your email address with your password, kept only as a secure hash) and use them only to authenticate you and protect your account. Comments, messages and questions to Plutura AI may reveal religious beliefs, health, finances, relationships or other sensitive matters if you choose to include them; please avoid including sensitive information about yourself or others.
We use and disclose sensitive personal information only to provide the features you request, to keep Plutura secure and as the law permits, and not to infer characteristics about you. We do not sell it, use it for targeted advertising or use it to build advertising audiences. Where a law requires your consent before we process sensitive information, we will ask for it first. If a law gives you the right to limit how we use sensitive information, you can exercise it at [email protected].
7Personalization and preferences
If you choose interests when you create an account, and when you save articles, we use that information to suggest articles you may like. You can change or remove your interests at any time in My Plutura. We do not use this information to make decisions that have legal or similarly significant effects on you.
8Analytics
Plutura uses Google Analytics 4, a service of Google LLC, to understand which articles are read, how readers find Plutura and where the site is slow. Google Analytics sets its own cookies on plutura.com (_ga and _ga_ followed by an identifier, which last up to two years) and records the pages you view and how you interact with them, how you arrived (for example, from a search engine, another site or one of our emails), your type of browser and device, and your approximate location, which Google works out from your IP address. Google Analytics does not log or store IP addresses.
We never send Google Analytics your name, your email address, what you search for, your questions to Plutura AI or anything you type in a form. We count newsletter sign-ups, the start of a Plutura Plus checkout and the number of questions asked to Plutura AI, without their content. Google signals and the sharing of this data for advertising are turned off, so it is not used to personalize ads. You can read how Google uses this information at www.google.com/policies/privacy/partners.
You can turn analytics off at any time in Your Privacy Choices; the change applies straight away in this browser and removes the Google Analytics cookies. Analytics is also off when your browser sends a Global Privacy Control signal. If you visit from the European Economic Area, the United Kingdom or Switzerland, analytics stays off unless you turn it on in Your Privacy Choices.
We do not link Google Analytics cookie identifiers to your Plutura account or combine analytics data with information that identifies you.
10How we use information
We use personal information to:
- Provide and maintain the service
- Operate accounts and Plutura AI
- Send email you have subscribed to or that relates to your account
- Measure and improve the site
- Show and measure advertising
- Moderate comments and enforce our terms
- Detect abuse and comply with law
11Service providers and data sharing
We do not sell your personal information. We may disclose it when the law requires it, or to protect the rights, safety and security of Plutura, our readers or others. If Plutura is involved in a merger, acquisition or sale of assets, your information may be transferred as part of that transaction, and this policy will continue to apply to it.
Otherwise, except for the independent processing described in this policy, we share personal information only with service providers that help us run Plutura, under agreements that allow them to use it only to provide their service to us. Polar, as merchant of record, and Google, when you choose Google sign-in, also use the information they receive under their own terms and privacy policies:
- Hosting and security: Hostinger (our servers, located in the United States) and Cloudflare (content delivery, security and bot protection)
- Site analytics: Google (Google Analytics 4), as described in Analytics, with Google signals and advertising data sharing turned off
- Email delivery: Resend
- Payments for Plutura Plus: Polar, which acts as the merchant of record and processes your payment details
- Sign-in with Google, if you choose it: Google
- AI processing for Plutura AI: Anthropic
- Encrypted backups: Google Drive (the backups are encrypted before they leave our servers)
12Data retention
We keep personal information only as long as we need it for the purposes in this policy:
- Account information: while your account is open, and deleted within 30 days after you delete your account
- Newsletter: while you are subscribed; when you unsubscribe, we keep your email address on a suppression list so we never send you the newsletter or other marketing email again unless you sign up again, together with a record of your consent
- Plutura AI: guest and free conversations are not saved as a history; Plus history and our AI provider’s limited retention as described above
- Analytics: Google Analytics keeps the information linked to its cookies for 2 months; after that, only aggregated reports remain
- Messages you send us: as long as we need them to answer you and follow up
- Membership and order records: as long as accounting and tax law require
- Server logs: for short periods, for security and troubleshooting
- Backups: encrypted and replaced on a rolling basis, so deleted information leaves them within 30 days
- Records we must keep: where the law requires or allows it, we may keep limited information after you delete your account or unsubscribe, such as tax and accounting records, records of privacy requests and unsubscribes, and information needed to prevent fraud, resolve a dispute or meet a legal obligation, only for those purposes and only as long as needed
13Your rights and choices
You can see and update most of your information in My Plutura, download a copy of it, and delete your account at any time. Every newsletter and marketing email includes a one-click unsubscribe link.
You can also email [email protected] to access, correct, download or delete your personal information, or to withdraw a consent you gave. We verify requests to protect your account, but we do not ask you to verify a request to opt out where the law does not allow it. We respond within 45 days, or sooner where the law requires it (for example, within one month under European and UK law), and we will tell you if the law allows us more time and we need it.
14US state privacy rights
Depending on where you live in the United States, including California and other states with comprehensive privacy laws, you may have the rights below. Plutura does not sell your personal information and does not share it for targeted advertising. We do not have actual knowledge that we sell or share the personal information of consumers under 16, and we do not disclose personal information to third parties for their own direct marketing purposes.
To exercise these rights, email [email protected] or use Your Privacy Choices, which honors Global Privacy Control signals. You may use an authorized agent. If we decline your request, you can appeal by replying to our decision. We will tell you the outcome of your appeal within the time the law requires and, if we deny it, how to contact your state attorney general.
- Right to know and access
- Right to delete
- Right to correct
- Right to opt out of sale or sharing
- Right to non-discrimination
- Right to confirm whether we process your personal information
- Right to receive a portable copy of your information
- Right to know the categories of third parties, or the specific third parties, that receive it, where state law provides it
- Right to opt out of targeted advertising and of profiling used for decisions with legal or similarly significant effects (we do not use your information for such decisions)
- Right to limit the use of sensitive personal information, where it applies (see “Sensitive information”)
15European and UK privacy rights
If European Union, European Economic Area, United Kingdom or Swiss data protection law applies to our processing of your personal data, HIMMELYS LLC (Plutura Media) is the controller. We rely on these legal bases: performing our contract with you when we provide your account, Plutura Plus, Plutura AI and the emails you asked for; our legitimate interests in running, securing, measuring and improving Plutura and preventing abuse, balanced against your rights; complying with legal obligations, such as keeping tax records; and your consent, for example for analytics in your region, the newsletter, or where the law requires consent for sensitive information.
You may have the right to access, correct, delete, restrict or receive a portable copy of your personal data, to object to processing based on legitimate interests, and to withdraw consent at any time without affecting processing that already took place. To use these rights, email [email protected]. You can also complain to the data protection authority where you live or work or, in the United Kingdom, to the Information Commissioner’s Office.
16Children’s privacy
Plutura is written for adults and is not directed to children under 13. You must be at least 13 to create an account. We do not knowingly collect personal information from children under 13; if we learn that we have, we delete it. Parents and guardians can contact us at [email protected].
We do not sell, or share for cross-context behavioral advertising, the personal information of anyone we know is under 16. If you believe a child under 13 has given us personal information, contact [email protected] with enough detail for us to find it, without sending more information about the child than we need, and we will delete it.
17Security
We protect personal information with measures appropriate to its sensitivity: encrypted connections (HTTPS) on every page and encrypted connections for email delivery wherever the receiving email service supports them, passwords stored only as secure hashes, access limited to the people and systems that need it with two-step verification, encrypted credentials and encrypted backups, and protection against abuse and automated attacks.
No method of transmission or storage is completely secure. If a security incident affects your personal information, we will notify you as the law requires.
18International visitors
Plutura is operated from the United States, and our servers are located in the United States. If you use Plutura from another country, your information is transferred to, stored and processed in the United States, where data protection laws may differ from those in your country. Our service providers may process information in other countries under contractual safeguards.
Where the law requires safeguards for international transfers, you can contact [email protected] for information about the safeguard used and how to get a copy of it.
19Contact us
For privacy questions or requests, email [email protected] or use the Contact page. You can also write to us at Plutura Media (a trade name of HIMMELYS LLC), 111 N Wabash Ave, Ste 100 #3312, Chicago, IL 60602, United States.
20Changes to this policy
We may update this policy as Plutura changes. The date at the top shows when it last changed. If we make a material change, we will say so on the site and, if you have an account or receive our emails, by email before it takes effect.