Privacy Policy
Draft for review · Prepared 6 October 2026 · Effective date not set
Scope
This draft describes the supplied static website. The Shows page reads public show and published guide information from Google Firestore. It does not describe the separate PlotPal app. The operator’s legal name, provider details and retention schedule must be confirmed before publication.
Information you provide
If you email PlotPal, your email address, name if supplied, message and related show or guide details are received through email. Use of contact fields prepares an email on your device. Nothing is sent until you send it through your email application. Avoid sending sensitive information that is not needed for your request.
Purpose and disclosure
Correspondence is used to answer questions, consider guide requests, investigate corrections or removal requests, and manage privacy concerns. Access should be limited to those handling the request and relevant service providers, or where disclosure is required by law. Email and hosting providers, their locations and any overseas handling remain to be confirmed.
Website data
This package includes no analytics, advertising trackers, cookies, accounts or browser storage. Search and filter values are used in memory and disappear when the page is closed. Catalogue pages connect to Google Firestore, and show artwork loads from the addresses stored in the catalogue. These providers receive ordinary connection information, such as your IP address. A chosen web host may process IP addresses and request logs. Its actual practices must be added before launch.
Retention and security
Keep correspondence only as long as needed for the request and applicable obligations, then delete or de-identify it. The operator must confirm retention periods, backup handling and access controls. No internet transmission or storage method is guaranteed secure.
Access, correction and complaints
Email sheridan@spoilproof.com to request access, correction or deletion, or to raise a privacy complaint. Identity may need to be verified. Explain the request without sending unnecessary identity documents. If unresolved, you may contact the relevant privacy regulator, including the OAIC where it has jurisdiction.