Data & privacy
What you share, what stays private, and the choices you have on Plundr.
Last updated September 28, 2026
What the harbor keeps
When you create an account, Plundr stores your username, display name, email address, a password hash, and account dates and verification status. We also store the profile details and pictures you choose to add; your dispatches and replies; crew memberships and roles; follows, blocks, votes, and saved dispatches. Session, recovery, rate-limit, report, and moderation records help operate and protect the community.
What everyone can see
Your username, display name, bio, profile picture, public activity, and crew memberships can be seen by other visitors. Public pages may appear in search engines. Your email address, password hash, saved items, and block list are not part of your public profile. Reports are visible to the moderation team responsible for that crew and to site moderators and administrators.
Blocking changes what accounts see while signed in. It does not make public content private or prevent someone from viewing it while signed out.
Your picture, your choice
A profile photo is optional; you can use a built-in insignia instead. Photos must be JPG, PNG, or WebP and no larger than 4 MB (4,000,000 bytes). Uploaded pictures are decoded, resized, and saved as new WebP images without the original EXIF or GPS metadata. Anything visible in the picture itself remains visible. Replacing or removing a profile picture removes its previous file from the active site after the change succeeds.
Cookies and service providers
Plundr uses an essential, HttpOnly session cookie for sign-in and request security. Live credentials are not stored in your browser’s local storage. This site includes no advertising trackers or third-party analytics code. Namecheap provides hosting and, in this installation, outgoing account email. Hosting and mail systems may process IP addresses, request information, and delivery logs as part of providing those services.
Moderation and access
Site administrators appoint sitewide moderators. A crew’s creator administers that crew and can appoint its moderators. Crew roles do not grant sitewide authority. Moderators can review reports and moderate content within their assigned scope; moderation and role changes are recorded. A crew role does not grant access to members’ email addresses, passwords, saved items, or block lists.
Download, change, or delete
Account settings let you update your profile, remove a photo, change your passphrase, export your account data as JSON, manage blocks, or delete your account. The JSON export contains account records and image references; it is not an archive of the image files. Save any pictures you want to keep separately.
Deleting your account removes its content and memberships from the active database. Deleting one of your dispatches also removes replies attached to it, including replies from other people. Transfer administration of any crews you own before deleting your account. Moderation audit records may remain with the deleted account’s actor reference removed.
Backups and copies elsewhere
Active account data is retained while your account exists or until you remove it. Expired session and recovery records and abandoned uploads are removed by scheduled maintenance. Deletion from the live site does not immediately erase copies in backups; those may remain until the relevant backup is replaced or expires. Search caches, screenshots, and copies made by other people are outside Plundr’s direct control.
Questions or requests
For questions about your information or help with an account-data request, contact noreply@plundr.org. Please do not send your password. We may need to verify that the account belongs to you before acting on a request.