Privacy, plainly.
Reading should not require an advertising profile.
Last updated: 30 October 2026.
Controller and contact
The controller is Nicklas Schäfer. The service address and electronic contact are in the Impressum. You may send privacy requests to the contact there.
On the website
We do not include advertising scripts or third-party analytics. Your appearance preference is saved in your browser. OpenAI Sites and Cloudflare process IP addresses, requested URLs, request times and technical information to deliver and protect the service. Essential authentication storage is used when you sign in. Specific article URLs may appear in infrastructure request logs.
With the extension
The extension sends the URL of a supported article and its canonical URL, when available, to find an existing brief. These specific article URLs are used by plain’s lookup service to find a published answer. The extension does not upload article text or read your browser’s full history database. Automatic lookup sends supported article URLs while you browse the sites you enable. We do not use those URLs for advertising or third-party analytics.
Your pairing token is stored locally by the browser extension. It can be revoked from your account. It is never inserted into the publisher’s page.
Accounts and payments
Account features use Sign in with ChatGPT. We store a site-specific account identifier, subscription status and hashed extension tokens. When subscriptions open, Stripe handles payment details; plain does not receive your full card number.
Source processing
The crawler sends public publisher articles to a local model running on the operator’s computer to prepare and check briefs. No paid inference API or automatic cloud fallback is used. Reader browsing history is not included. Original source links and publication dates remain visible on each brief.
Purposes and legal bases
Account, pairing and billing data are processed to provide the requested service under Article 6(1)(b) GDPR. Essential delivery, security and abuse prevention rely on our legitimate interest in operating a secure service under Article 6(1)(f). Statutory record keeping relies on Article 6(1)(c). You may object to legitimate-interest processing.
Recipients and international processing
OpenAI provides Sites hosting and account authentication, Cloudflare provides hosting infrastructure, and Stripe processes payments. These providers may process data outside the European Economic Area under their applicable data protection arrangements. See OpenAI’s privacy policy, Cloudflare’s privacy policy and Stripe’s privacy policy. We do not sell personal data or disclose it to advertising networks.
Retention
Account and subscription records are kept while needed to administer access, resolve payment issues or meet legal obligations. You may request deletion; records still required by law are restricted and retained for the applicable statutory period. Pairing tokens expire after 90 days and can be revoked earlier. Provider security logs follow the relevant provider’s retention arrangements. We do not promise an automatic deletion schedule that has not been implemented.
Your rights
You may request access, correction, deletion, restriction and, where applicable, portability of personal data. You may object to legitimate-interest processing and withdraw consent without affecting earlier lawful processing. Contact the controller above. You may complain to a supervisory authority, including the authority where you live or work. German authority contact details are available from the BfDI.
Messages and automated processing
Support and correction messages are used to answer your request and resolve the matter. Avoid sending card details or pairing tokens. Automated editorial checks do not make decisions about your legal rights or similarly significant personal interests.
Release status
The reader is free and ad-free. Extension subscriptions remain closed until Store distribution and billing are ready. Subscription terms and a support contact must be published before sales open.