Privacy Policy
In force since 25 September 2026.
This notice is provided under Articles 13 and 14 of Regulation (EU) 2016/679 (GDPR) to anyone who visits plyjoin.com or uses the Plyjoin application. It is written to be read: if anything is unclear, write to us and we will explain it.
1. Who processes your data
The data controller is Riccardo Brugugnoli, via della Cittadella 29, 44121 Ferrara (FE), Italy, VAT number IT 01433520291.
For anything concerning your data, including the rights described in section 9, write to info@plyjoin.com. A person answers, not a form.
No Data Protection Officer has been appointed: none of the cases listed in Article 37 GDPR applies.
2. In short
Plyjoin runs inside your browser: your designs are computed by your own computer, not by our servers. We collect the minimum needed to give you an account and a subscription. We do not advertise, we do not profile anyone, we do not sell data, and we use no analytics that follow you across websites. We do count how often things happen — how many visits, how many designs exported, where people stop — but we count them ourselves, with no cookies, without recording your IP address and without any number that would recognise you on your next visit. They are numbers, not people.
3. What we process, why, and for how long
| Data | Purpose | Legal basis | Retention |
|---|---|---|---|
| Email address | create and run your account, let you sign in, send the password recovery link and service messages | performance of the contract — Art. 6(1)(b) GDPR | for as long as the account exists; deleted within 30 days of closure |
| Password | let you sign in | performance of the contract — Art. 6(1)(b) | as above. We never store the password itself, only a scrypt hash with a random salt, from which the password cannot be recovered |
| Projects saved online (part names, dimensions, geometry, settings) | let you find your work from any computer | performance of the contract — Art. 6(1)(b) | until you delete them; deleted with the account |
| Plan, expiry date, subscription status and identifier | know which features you are entitled to, handle renewals and cancellations | performance of the contract — Art. 6(1)(b) | for the duration of the relationship; accounting records are kept for 10 years by Paddle, which issues the invoice |
| Server logs: IP address, date and time, requested address, result, browser type | keep the service running, investigate faults, defend the site against abuse and attacks | legitimate interest in the security of the service — Art. 6(1)(f) | 30 days, then deleted automatically |
| Payment data (card, billing address, tax identifiers you provide) | collect the subscription fee and issue the invoice | performance of the contract and legal obligation — Art. 6(1)(b) and 6(1)(c) | we never see it: it is handled solely by Paddle, the seller of record. See section 6 |
| Aggregate usage statistics: page opened, button pressed, kind of shape or joint created, export performed, paid feature encountered, session length, site you came from | understand how the program is used and where it needs improving | legitimate interest in improving the service — Art. 6(1)(f) | 180 days, after which the files are deleted automatically. They contain no IP address, no email address and no identifier that outlives the browser tab: they cannot be traced back to you |
| Pictures you choose to put online (the picture of the project only, never the design) | give you an address to share | consent — Art. 6(1)(a), given by pressing “Share” and withdrawn by removing the picture | until you remove it; deleted with your account in any case. It is visible to anyone with the link |
| Content of emails you send us at info@plyjoin.com | answer you and keep a record of the request | legitimate interest in handling support requests — Art. 6(1)(f) | 24 months from the last message |
We do not process special categories of data (Article 9 GDPR: health, beliefs, biometrics and the like) and we ask for nothing that the service does not need.
4. Where the data comes from
Almost all of it comes from you: your email and password when you register, your projects when you choose to save them online. Server logs are generated automatically when your browser contacts the server. Your subscription status — plan, expiry, cancellation — reaches us from Paddle when you pay, renew or cancel.
5. What stays on your device
- One technical cookie (
sess): it keeps you signed in, lasts 30 days, isHttpOnlyandSameSite=Lax, and contains only a signed identifier, no personal data in clear text. - In your browser's local storage: the project you are working on (so you get it back if you close the tab by accident), your chosen language, and the current licence key. These stay on your computer; we never receive them.
We use no profiling, analytics or third-party cookies. That is why you see no consent banner: a strictly necessary cookie does not require consent under Article 5(3) of Directive 2002/58/EC.
Our usage statistics leave nothing on your device either. The number that ties together the events of a single visit is random, lives in a variable on the page and disappears when you close the tab: it is never written to a cookie or to browser storage, so on your next visit you are a new person to us as well. That is why those statistics require no consent under Article 5(3): that rule concerns what is stored on your device or read from it.
6. Who we share data with
Only with those we need in order to run the service, and only for that purpose. A data processing agreement under Article 28 GDPR is in place with each of them.
| Provider | Role | Where data is processed | Transfer safeguards |
|---|---|---|---|
| Hetzner Online GmbH | hosts the server and the backups | Germany — European Union | no transfer outside the EU |
| Paddle.com Market Ltd | collects payment, applies the applicable tax and issues the invoice as merchant of record. It receives card and billing data; it passes on to us only your email and subscription status | United Kingdom | European Commission adequacy decision for the United Kingdom |
| Resend, Inc. | delivers service emails, such as the password recovery link | United States | European Commission Standard Contractual Clauses, supplemented by the data processing agreement |
| Cloudflare, Inc. | manages the domain, the DNS records and the forwarding of messages sent to info@plyjoin.com. It does not sit in front of the site's traffic | United States and global network | European Commission Standard Contractual Clauses |
None of them is allowed to use your data for their own purposes. We do not sell, rent or trade data with anyone else. We may disclose data to judicial or other authorities only where a law or an order requires it.
7. Transfers outside the European Union
As shown in the table, two providers process data in the United States. Those transfers rely on the Standard Contractual Clauses adopted by the European Commission in Decision 2021/914, which impose protection equivalent to European standards. You may request a copy of the safeguards by writing to info@plyjoin.com.
8. How we protect data
The site is served over HTTPS only, with automatically renewed certificates. Passwords are stored as scrypt hashes with individual random salts. Session cookies are signed and cannot be forged. The server accepts connections only on the necessary ports, receives security updates automatically, and is backed up every night; backups are kept for 30 days. Administrative access uses cryptographic keys only, never passwords.
No system is invulnerable. Should a breach occur that poses a risk to your rights, we will notify the Italian supervisory authority within 72 hours and, where the risk is high, you directly, as required by Articles 33 and 34 GDPR.
9. Your rights
You may exercise the rights under Articles 15 to 22 GDPR at any time, free of charge:
- access: know what we process and obtain a copy;
- rectification: correct inaccurate or incomplete data;
- erasure: be forgotten, within the limits of legal obligations;
- restriction: freeze processing while a complaint is discussed;
- objection: object to processing based on legitimate interest;
- portability: receive your data in a machine-readable format.
On two of these we are more direct than most: your projects can be downloaded from the application as .json files, and cutting layouts as DXF or SVG, whenever you like, without asking anyone; your account can be deleted by you, from the My account page, together with all projects, immediately and permanently.
For anything else write to info@plyjoin.com: we answer within 30 days, as Article 12 GDPR requires.
If you believe the processing breaches the Regulation you may lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali, piazza Venezia 11, 00187 Rome — www.garanteprivacy.it) or with the supervisory authority of the country where you live, and you may always go to court.
10. If you do not provide the data
An email address and a password are necessary to have an account: without them we cannot create one. You can still use Plyjoin without registering, from the Try without signing up page, with the free plan's features. Everything else is optional.
11. Automated decision-making
We take no decisions based solely on automated processing, including profiling, producing legal effects concerning you or similarly significantly affecting you (Article 22 GDPR).
12. Changes to this notice
If anything substantial changes — new purposes, new providers, different retention periods — we will tell you by email at least 30 days before it takes effect, at your account address. Minor changes are published here and reflected in the date at the top of the page.