This policy explains how PlotBite ("we", "the site") collects, uses, stores, and protects your personal information when you visit and use the site. By using the site you acknowledge that you have read and understood this policy. If you disagree with any part of it, please stop using the site.

1. Information we collect

1.1 Information you provide

• Account information: email address, password (stored only as a salted bcrypt hash — we cannot recover the plaintext), plus an optional nickname and avatar URL.
• Contact messages: when you write to us via the Contact page, we store your name, email address, and the message content.

1.2 Information generated while you use the site

• Reading activity: for signed-in users, the articles you bookmark and the posts you like.
• Device and log data: access time, requested paths, HTTP status codes, IP address, browser type and version (User-Agent), and referring pages. This data is used to troubleshoot errors and to prevent brute-force attacks and abuse.
• Cookies and local storage: used to keep you signed in (JWT), to remember your cookie consent choice, and to store interface preferences. See our Cookie Policy for details.

2. How we use this information

• Creating and maintaining your account, verifying your identity, and keeping it secure;
• Showing your bookmarks and likes so they stay in sync across devices;
• Counting article likes for ranking and editorial purposes;
• Diagnosing service issues, analyzing performance bottlenecks, and blocking abusive traffic (such as login brute-forcing or form spam);
• Complying with legal obligations or protecting the safety of users and the public when required by law.

We do not sell your personal information to any third party, nor do we use it for automated marketing unrelated to the purposes above.

3. Cookies and similar technologies

The site uses cookies and browser local storage to keep you signed in, remember your cookie consent choice, and store preferences. Your sign-in token lives in your browser, not in a server-side session, and clearing your browser data signs you out. Third-party advertising partners (such as Google AdSense) may use cookies or similar technologies for frequency capping and ad relevance. You can choose "Essential only" in the cookie banner on your first visit, or manage cookies in your browser settings. See our Cookie Policy for details.

4. Information sharing and third-party services

• Advertising: the site reserves ad slots filled and billed by third-party networks (e.g. Google AdSense). These partners may collect data used for ad delivery and fraud prevention (such as IP address, User-Agent, impressions and clicks), subject to their own privacy policies.
• Infrastructure: the site runs on self-managed servers. Data in our database (MySQL) and cache (Redis) stays on our own servers and is not shared externally.
• Hosting & operations: servers and networking are operated by us; we do not hand your personal information to unrelated third-party processors.
• Legal disclosure: we may disclose information where legally required, or to the extent necessary to protect the legitimate rights of the site and its users.

5. Data retention

• Account information: kept until you close your account or after prolonged inactivity.
• Bookmarks: kept until you remove them or close your account.
• Like counts: stored as counters, not linked to identifiable personal profiles.
• Service logs: kept for security auditing for no more than 90 days.
• Contact messages: kept for 12 months after the issue is resolved, for follow-up.

6. Data security

Data is transmitted over HTTPS, passwords are stored as salted hashes, database access uses least-privilege accounts reachable only from our internal network, and rate limits protect the sign-in and registration endpoints against brute-force attacks. That said, no technical measure guarantees absolute security — please keep your email account and password safe.

7. Your rights

Subject to applicable law, you may:

• Access and correct your profile (nickname, avatar);
• Remove bookmarks and likes;
• Request an export or deletion of your account and associated data;
• Withdraw a previously given cookie consent (by clearing browser data as described in the Cookie Policy).

To exercise these rights, submit a request via the Contact page. To protect your account, we may need to verify your identity first (for example, by confirming via your registered email), and we will complete the request within 15 business days.

8. Children

The site is intended for a general audience and is not directed at children. If you are under 14, please use the site with a parent or guardian and do not submit sensitive personal information. If we learn that we have collected a child's personal data without parental consent, we will delete it promptly.

9. Changes to this policy

This policy may be updated as laws or our services evolve. When it changes, we will update the "Last updated" date at the top of this page. For material changes (such as new data uses), we will provide a prominent notice on the site. Continued use of the site constitutes acceptance of the updated policy.