Your data, handled honestly.

Anonymous tier (no signup)

Anonymous renders are linked to an opaque, Secure and HttpOnly browser cookie so recent history can survive a reload without creating an account. The cookie contains no email or IP address. It is renewed whenever you use Plotmosa in this browser and lasts up to one year after your last use; clearing site data or using another browser or device cuts your access. From the Gallery in this browser you can list, delete and download your guest renders as JPEG, PNG or WebP, or as a ZIP file. When you sign in or register in this same browser, the guest renders made in it are moved into your account (see How long we keep your data below); moving them does not publish them. Render outputs and the sketches or photos you upload are stored in encrypted Azure Blob Storage and may be processed during generation by Google Vertex AI or, when Google is temporarily over capacity, by Microsoft Azure OpenAI. A separate hashed-IP abuse counter and a browser-bound 10-credit daily promo budget limit anonymous use.

Registered Free / Paid tier

Email is stored so you can sign in via magic-link or Google OAuth, and so we can notify you about your account. Mollie (Dutch payment provider) handles all payment data via PCI-DSS compliant infrastructure — we never see your card. Your sketches, references, and renders are stored on Azure Blob Storage and linked to your account; nobody outside the rendering pipeline accesses them, and we never use them for training.

What we never do

• Train AI models on your uploads
• Sell or share data with third parties
• Track you across other websites
• Use cookies for advertising

Data location

Plotmosa is hosted in Microsoft Azure and stores image bytes in encrypted Azure Blob Storage and metadata in Azure Table Storage. Image generation is processed by Google Vertex AI and, when Google is temporarily over capacity, by Microsoft Azure OpenAI; processing region depends on the selected model and service availability. Payment metadata is held by Mollie in the EU.

How long we keep your data

• Account profile — until you delete it (see below). Email, credits balance, signup IP, tier.
• Sketches, references, renders — kept as long as your account exists, so you can revisit your history. Deleted with the account. This includes guest renders moved into your account when you signed in or registered in the same browser: from then on they follow these account rules.
• Guest renders — linked only to the browser cookie described above, which is renewed while you keep using Plotmosa and lasts up to one year after your last use; the image links we issue stay valid for up to one year. We do not delete guest renders automatically on a set date. You can delete a guest render yourself in Gallery at any time, which removes its image and its Gallery entry. The sketch or photo you uploaded for it and the record of the render job, including any text prompt, are stored separately and are not removed by that step — email [email protected] with the image link or the file name of the download to have them erased. Deleted copies may remain in backups for the cycle described under Backups below. When you sign in or register in the same browser, the guest renders made in it are moved into your account (a very large history may need more than one sign-in to move completely); they leave the browser-bound guest history and from then on follow the account rules above, including deletion with your account. Moving them does not publish them. Only renders made in that browser are moved: renders made in other browsers or on other devices are not, and neither are renders that browser can no longer reach (for example because the browser cookie described above expired or was cleared). The render's own record moves with it, including any text prompt and the references to the uploaded sketch or photo stored in it, and then follows the account rules. The uploaded sketch and photo files themselves and the separate render-job records are not moved; they keep following the guest rules described here. If you share a browser, guest renders made in it while nobody was signed in are moved into whichever account signs in there next, so delete your guest renders in Gallery before handing the browser to someone else.
• Payment receipts — kept for 7 years after the transaction to comply with Dutch tax law (Belastingdienst retention requirement). After you delete your account, these receipts are anonymized — they no longer link to your identity but remain in our accounting log.
• Magic-link tokens — single-use, expire after 15 minutes.
• Sessions — 90 days from last login, then auto-expire. Deleted when you sign out or delete your account.
• Backups — we keep encrypted daily copies of the database and short-term recovery copies of stored files, so a mistake on our side cannot destroy your account. Active copies are purged on a rolling 30-day cycle, and the underlying recovery layer holds a deleted copy for up to 30 days more, so the outside limit is 60 days. Deleting your account removes your data from the live service immediately; the copies age out within that window and are never used except to recover from data loss.

Your GDPR rights

You can delete your account at any time from the Account modal (Delete account → type your email to confirm). This erases your profile, all renders, all references and all sessions from the live service straight away, and anonymizes payment receipts; encrypted backup copies age out within 60 days at the outside (see Backups above). You can also email [email protected] for access, correction, or data-export requests; we respond within 30 days as required by GDPR Articles 15–17.

Last updated 2026-10-19. Full DPA available on request. Plotmosa is a project of SoKKoS (KvK 42029374, NL).