Nothing to collect,nowhere to send it.

What it keeps, and where

Everything below is stored by your browser, on your machine, in the space it gives the extension. None of it is transmitted anywhere.

• Your recent captures. The picture itself, the marks you have drawn on it, and the framing you chose, in the browser’s on-device database. We keep the last three, so a reload, a restart or an update does not cost you the work; the fourth pushes the oldest out.
• Your settings. The mode, format, background, padding and frame you last used, so the app opens the way you left it.
• What you export. PNG, JPEG, WebP, PDF, HTML and Markdown files go wherever you save them, like any other download. We have no copy.

Deleting a capture from the Recent strip removes it. Removing the extension, or the Mac app, removes the rest.

The three times it uses the network

While a page is being archived, some of its images have to be requested again so they end up inside your file rather than pointing at a URL that may be gone next week. Those requests go to the site you are capturing — the same server your browser just loaded the page from, signed in exactly as you already were — and nowhere else.

The second is the licence, and it happens once. When you paste a key, Plenosends us three things: which licence the key belongs to, a random name this browser invented for itself, and the word “Chrome” or “Safari”. That is how a licence knows how many browsers it has been put in, which is the whole of what we are counting. It carries no email address, nothing derived from your machine, and nothing about any page.

It happens when you unlock a key, and after that at most once a day, when the editor opens. Not on every launch, and never while you work — the answer is remembered for twenty-four hours, so what this could tell us about how often you use Pleno is close to nothing, which is the reason it is once a day rather than every time.

It repeats because an activation you free from your licence page has to actually come back; a licence that never looked again could be handed out indefinitely, and the seat count would be decoration. That is the trade, and it is the only thing here we can switch off: a browser whose activation was freed drops to the free version, and pasting the key there again restores it.

It never blocks you. A failed request, a blocked domain, a server of ours having a bad afternoon — Plenocarries on. Only an explicit “this activation was freed” ends it, and if nobody answers at all it keeps working for a fortnight before falling back to the free version.

The third only happens if you ask for it, and most people never will. A copy of Pleno bought from the Mac App Store has no licence key: it unlocks from the receipt Apple put inside the app, read on your own Mac, and nothing about that leaves the machine. But Apple cannot license Chrome, so Options offers one button that turns that receipt into a key. Pressing it sends the receipt to us once. It says which app was bought and when it was first bought, which is what lets us hand back the same key rather than a new one each time; it carries no name, no email address and nothing about your Mac. Nobody who does not press it ever contacts us at all.

That is the whole of it. The extension’s source contains exactly three fetch calls, and those are what they do.

Why it asks to see every site

Both browsers ask you to allow Pleno on the pages you want to capture — Safari when you turn it on, Chrome when you install it — and the request covers all websites for the obvious reason: a capture tool cannot know in advance which page you will point it at.

Two things about how that access is used. The extension has no scripts that run on pages by themselves — it injects its capture code into a page only when you start a capture, and not before. And what it reads there becomes the picture you asked for and nothing else. You can narrow or withdraw the permission at any time: in Safari → Settings → Extensions, or in Chrome under Site access on the extension’s card at chrome://extensions.

Buying it

Through the Mac App Store, Apple handles the purchase. We never see your payment details, and what Apple passes to us is aggregate sales reporting, not customers. Apple’s own privacy policy covers that side of it.

Buying a licence directly, the checkout is run by Paddle.com, our merchant of record, who takes the payment and issues the invoice under their own privacy policy. What reaches us is your email address and the order behind it, kept so we can issue your licence key and answer you if something goes wrong with it.

The key is checked on your machine. What we are told is which licence and which browser, when the key is pasted and at most once a day after that — set out in full under The three times it uses the networkabove. What we are never told is what you capture, what you open, or when you are working. The once-a-day limit exists precisely so that “how often do they use Pleno?” stays a question we cannot answer.

If you email us

Then we have your address and whatever you wrote, in our mailbox, kept as long as it takes to answer you and to recognise you if you write again. We do not add you to anything.

This site is a separate matter

Everything above is about the extension. The website you are reading it on is an ordinary website: it counts visits and uses the cookies it needs to function. That is covered by the studio’s privacy policy, and it has nothing to do with what the extension on your machine does.

Children

Pleno is not directed at children under 13, and collects no personal data from anybody of any age.

Changes to this policy

If the extension ever handles data differently, this page changes with it and the date at the top moves. Given that the claims above are statements about what the code does, a change that made them untrue would be a change to the app first.

Contact

Salt and Co. Design Partners LLC, 307 Henrys Ln, Bristol, VA 24202, USA — hello@addsaltandco.com. See also the terms of use.