Privacy Policy

PlamoHangar is a collection tracker for scale model kits, operated by Chris Sartoris. This policy explains what information the service holds about you and what happens to it. It describes how the service actually behaves — if you find a discrepancy, that is a bug, and we would like to hear about it at privacy@plamohangar.app.

The short version

We collect the minimum needed to run an account and store your collection. There are no analytics, no advertising, and no third-party trackers of any kind. The most important thing to understand is that your profile and collection are public by default — see what other people can see below, including how to turn that off.

What we collect

Information you give us

• Your email address. Required — it is how you sign in. There are no passwords; we email you a short numeric code instead.
• Your handle (the name in your profile URL), and optionally a display name, a short bio, an avatar image, and links to your profiles on other sites.
• Your collection. The kits you own or want, their build status, ratings, written reviews, completion dates, photos you upload, and any corrections you make to catalogue details for your own copy of a kit.
• Kit submissions. If you add a kit that is missing from the shared catalogue, we record that you submitted it.

Information collected automatically

• Session records. When you sign in, we store your IP address and browser user agent alongside the session. This lets you see where your account is signed in and helps us investigate abuse. It is not used for tracking or profiling.
• Sign-in codes. We store the email a code was sent to and a hashed copy of the code itself — never the code in readable form. Codes expire after ten minutes and lock out after five failed attempts.

Our hosting provider also keeps standard server logs, which include IP addresses, as a normal part of operating and securing a website.

What other people can see

This is the part worth reading carefully. PlamoHangar is partly a social site, so new profiles are public by default. When your profile is public, anyone on the internet — signed in or not — can visit plamohangar.app/@yourhandle and see your handle, display name, bio, avatar, social links, your collection, your build photos, your completion statistics, and any reviews you have written. Your reviews also appear on the shared catalogue page for each kit, and public build pages produce link previews when shared on other sites.

Your email address is never shown publicly.

You control all of this in your account settings. You can make your entire profile private, in which case it becomes unreachable and your reviews stop appearing anywhere on the site. You can also keep your profile public while hiding your wishlist or your statistics individually.

Cookies and tracking

PlamoHangar sets a single cookie, which keeps you signed in. It is strictly necessary for the site to function. Your theme preference (light or dark) is stored locally in your own browser and is never sent to us.

There is no analytics software, no advertising, no tracking pixels, and no third-party scripts. Every asset the site loads — fonts, JavaScript, images — is served from our own domain, so simply visiting PlamoHangar does not reveal you to any other company. This is also why you will not see a cookie consent banner: there is nothing to consent to.

Email we send you

We send exactly two kinds of email: your sign-in code, and a confirmation when you change your email address. We do not send newsletters or marketing, and we do not share your address with anyone for their own use.

Who we share information with

We do not sell your information, and we do not share it for advertising. We rely on a small number of service providers to operate the site, and they process data only on our instructions:

• Hosting — runs the application and its database.
• File storage — stores the photos and avatars you upload.
• Email delivery — sends your sign-in codes.
• Cloudflare — DNS and email routing for our domains.

We may also disclose information where we are legally required to, or where it is necessary to investigate abuse, fraud, or a threat to someone's safety.

How long we keep it

• Account and collection data — until you delete it or close your account.
• Sessions — a session expires after ten days without use, and expired records are cleared on a periodic schedule.
• Sign-in codes — valid for ten minutes, then cleared shortly afterwards.

Your choices and rights

• See and correct your information. Everything on your profile is editable in your settings at any time.
• Export your collection. You can download your entire collection as a CSV file, in a format other tools can read.
• Control what is public. Make your profile private, or hide your wishlist and statistics individually.
• Delete your account. This permanently removes your account, your collection, your reviews, your uploaded photos, and your sessions.

One exception when you delete: if you contributed a kit to the shared catalogue, that kit stays in the catalogue, because other people may have it in their own collections. Your link to it is severed, so it is no longer attributed to you or connected to your account.

Depending on where you live, you may have additional rights over your personal data — such as access, correction, deletion, portability, or objecting to processing. The tools above cover most of these directly. For anything else, write to privacy@plamohangar.app and we will help.

Security

Traffic is encrypted in transit. Sign-in codes are stored hashed, expire quickly, and lock out after repeated failures. Sessions expire on their own after a period of inactivity. No system is perfectly secure, but we try to hold as little as possible in the first place — the safest data is the data we never collected.

Children

PlamoHangar is not intended for children under 13, and we do not knowingly collect information from them. If you believe a child has created an account, contact privacy@plamohangar.app and we will remove it.

Where your data is held

PlamoHangar is operated from the United States and your information is stored on servers there. If you access the service from outside the United States, you understand that your information will be transferred to and processed in the United States, where privacy laws may differ from those where you live.

Changes to this policy

We may update this policy as the service changes. The date at the top always reflects the current version, and if we make a change that materially affects how we handle your information, we will tell you before it takes effect.

Contact

Questions about privacy: privacy@plamohangar.app
Chris Sartoris
418 Broadway #11968, Albany, NY 12207, United States