Plaslo

Plaslo Privacy Policy

Last updated: October 13, 2026

This Privacy Policy explains how Plaslo Inc ("Plaslo," "we," "us," or "our") collects, uses, and shares information when you use the Plaslo website and app (the "Service"). Plaslo helps you find everyday microplastic exposure opportunities through a short assessment, a Microplastic Control Score, and practical recommendations.

If you have questions, contact us at michaelnordberg01@gmail.com (see "Contact us" below).

1. What we collect

We collect only what we need to run Plaslo. We don't currently ask for your name, phone number, address, location, photos, or contacts.

Information you give us

• Account information. When you create an account, we collect your email address and a password. Your password is handled by our authentication provider, Supabase. It is used to sign you in and is never stored in Plaslo's own database tables.
• Assessment answers. Your answers to the Plaslo assessment. These are questions about everyday habits and your home, such as what you drink water from, how you store and heat food, what your cookware and cutting boards are made of, the fabrics in your clothing and bedding, how often you clean or vacuum, and whether your work or hobbies expose you to plastic dust. You can take the assessment without an account. Your answers are saved to your account only after you sign up or log in and choose to save them.
• Decisions and saved picks. The choices you record for each recommendation, such as "replaced," "changed how I use it," "keeping it," or "replace later," and when you made or cleared them.
• Item suggestions. If you suggest an item for Search, we save the item name, plus the link and note if you add them, and your account ID if you're signed in. We don't ask for your email. Please don't put private info in the note.

Information we create from what you give us

• Your Microplastic Control Score. This includes level-by-level scores and a history of how your score changes when you retake the assessment or record decisions. The score reflects everyday habits. It is not a medical test and not a measure of what is in your body.

Information collected automatically

• Usage events. When you use certain parts of Plaslo, such as seeing your score or tapping "Create free account," we record a simple event in our own database. Each event includes its name, a few details about it (for example, your score or the scoring version), the time, and a random identifier stored in your browser. If you're signed in, it also includes your account ID. We use these events to understand how people move through Plaslo. We don't use third-party analytics services for this.
• IP address. When your browser sends a usage event, we record the IP address it came from and the time. When you send an item suggestion, we also record the IP address and your account ID if you're signed in. We use this to limit abuse of the Service (rate limiting).
• Device, browser, and log information. Like most online services, our hosting and database providers may automatically log technical information when your device connects to Plaslo. This can include IP address, browser type, device type, pages or endpoints requested, and timestamps. These logs are used to operate, secure, and troubleshoot the Service.
• Diagnostics. We don't use crash-reporting or performance-monitoring tools. If an error occurs, basic error details may appear in our hosting provider's server logs.

2. How we use your information

We use your information to:

• Provide the Service. We use it to create and secure your account, sign you in, and reset your password when you ask. We also use it to save your assessment, calculate your score, show personalized recommendations, and keep track of your decisions and progress.
• Understand and improve Plaslo. We use usage events to see which steps people complete and where they get stuck, and to improve the assessment and recommendations.
• Keep Plaslo safe. We use it to prevent abuse, rate-limit automated traffic, and protect accounts.
• Communicate with you about your account. For example, we send the password-reset emails you request. We don't send marketing emails.
• Meet legal obligations. We also use it to enforce our terms.

We do not sell or share personal information for cross-context behavioral advertising, and we don't show targeted ads. We don't use advertising or tracking tools. We don't track you across other companies' apps or websites, and we don't share your information with data brokers.

For people in the European Economic Area, the United Kingdom, and similar jurisdictions, our legal bases are:

• performing our contract with you (running your account and the Service)
• our legitimate interests (improving Plaslo, keeping it secure, and preventing abuse)
• complying with legal obligations

3. Who we share it with

We share information only with service providers that help us run Plaslo. They may use it only to provide services to us.

We may also disclose information:

• If the law requires it, such as in response to a valid legal request, or to protect the rights, safety, and property of our users, Plaslo, or others.
• As part of a business transaction, such as a merger or acquisition. If that happens, this policy will continue to apply to your information, or we'll give you notice.

Links to Amazon and other retailers. Some recommendations include links to products on Amazon and other retailer websites. When you tap one of these links, you leave Plaslo, and the retailer's own privacy policy applies to anything you do on their site. Amazon links include an affiliate tag. We may earn money when you buy through one. We don't receive your personal information from Amazon. The "Copy search" button only copies text to your device's clipboard; it doesn't send anything to us or to the retailer.

As an Amazon Associate, Plaslo earns from qualifying purchases.

4. Cookies and local storage

Plaslo uses a small number of cookies and browser storage items. They are needed for the Service to work. We don't use advertising cookies or third-party analytics cookies.

• Sign-in cookies (strictly necessary). Our authentication provider, Supabase, sets cookies that keep you signed in and refresh your session securely.
• Local storage (on your device):
  • Your in-progress assessment, so you don't lose your answers if you refresh or come back later. An unfinished assessment saved in your browser is discarded after 30 days of inactivity.
  • A random identifier used to connect usage events from the same browser (see "Usage events" above).
  • A note that you've already seen the Plaslo home tour.
• Session storage (on your device): short-lived items, such as a reminder to save your results after you sign in, or a confirmation message after you save a decision. These are cleared when you close the browser tab.

You can clear cookies and site data at any time in your browser settings. If you do, you'll be signed out, any unsaved assessment will be lost, and a new random identifier will be created the next time you use Plaslo.

Because we don't track you across other sites, Plaslo works the same way whether or not your browser sends a "Do Not Track" or Global Privacy Control signal.

5. How long we keep information

• Account information, assessment answers, decisions, and scores. We keep these for as long as your account is active. If you ask us to delete your account, we delete this information within 30 days of your request.
• Usage events. When your account is deleted, usage events are disconnected from your account, so they are no longer linked to you.
• Item suggestions. We keep them while we decide what to add. If you delete your account, they're no longer linked to you.
• IP addresses used for rate limiting. We keep these for no longer than 30 days.
• Information on your device. Items in your browser's local storage stay there until they expire (as described above) or until you clear them.
• Service provider logs. These are kept according to our providers' standard retention periods.

We may keep information longer where the law requires it, or where it's needed to resolve disputes or enforce our agreements.

6. Your rights and choices

Depending on where you live, you may have the right to:

• Access. Ask for a copy of the personal information we hold about you.
• Correction. Ask us to correct information that's inaccurate. You can change your password yourself in your account settings, retake the assessment at any time, and change or clear your recommendation decisions in the app.
• Deletion. Ask us to delete your account and personal information.
• Portability. Ask for your information in a commonly used, machine-readable format.
• Opt out. We don't sell your personal information, share it for cross-context behavioral advertising, or use it for targeted ads. So there's nothing to opt out of for those purposes. If you don't want usage events recorded, you can ask us to stop linking them to your account.
• Object or restrict (EEA/UK). Object to, or ask us to limit, certain processing based on our legitimate interests.
• Complain. Lodge a complaint with your local data-protection authority.

How to make a request. Email michaelnordberg01@gmail.com from the email address on your Plaslo account, with the subject line "Privacy request." Tell us what you'd like us to do. To protect your account, we may need to verify your identity before acting on a request. If you use an authorized agent (where the law allows it), we may ask for proof that they're allowed to act for you.

Account deletion. Open Account in the app and choose Delete account. If you can't use in-app deletion, email michaelnordberg01@gmail.com with the subject line "Privacy request." We'll confirm when your account and associated information have been deleted, within 30 days of your request.

Response time. We'll respond within 30 days. If we need more time where the law allows it, we'll tell you why.

No discrimination. We won't deny you the Service, charge you a different price, or give you a different level of quality because you exercised your privacy rights.

7. Security

We use reasonable safeguards to protect your information, including:

• encrypted connections (HTTPS, with browsers instructed to always connect securely)
• database access rules that let each signed-in user read and change only their own records
• rate limiting against automated abuse
• password handling by our authentication provider rather than in our own database tables

No method of transmission or storage is completely secure, so we can't guarantee absolute security. If you think your account has been compromised, change your password and contact us.

8. International transfers

Plaslo's service providers (Supabase, Vercel, and Linear) are based in the United States. Your information may be stored and processed in the United States and other countries where they operate. Those countries may have data-protection laws different from yours. Where required, we rely on appropriate safeguards, such as standard contractual clauses, for these transfers.

9. Children

Plaslo is intended for people 13 and older. We don't knowingly collect personal information from children under 13. If you believe a child under 13 has given us personal information, contact us and we'll delete it.

10. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we'll change the "Last updated" date at the top. If the changes are significant, we'll give you more prominent notice, for example in the app or by email. Please review this policy periodically.

11. Contact us