Privacy

Your plan is read inside your browser tab. It isn't uploaded, stored or sent to anyone, including us. We couldn't see it if we wanted to, because the site has no server code and no database.

What happens to your plan

• Pasted or dropped text is read by JavaScript in your tab, in a background worker of that same tab.
• It isn't written to cookies, local storage, session storage or the address bar. Reloading or closing the tab discards it.
• The page's Content-Security-Policy includes connect-src 'none', so your browser refuses any fetch, WebSocket or similar connection the page or its worker tries to make. Scripts, styles, fonts and images can only come from this site, and forms can't be sent. You can test this yourself.
• Values the plan marks sensitive are dropped while reading, before anything is displayed. Attributes whose names look secret are hidden until you choose to show them.
• The pull request summary contains addresses, actions, reasons and attribute names. It leaves out values. It only goes where you paste it. Addresses can include for_each keys, so read it before posting.

What the host sees

This site is static files on Cloudflare Pages. When you load a page, your browser asks Cloudflare for those files, and Cloudflare handles your IP address and browser details in order to deliver them and protect the service. See Cloudflare's privacy policy. Those requests happen before you paste anything and contain nothing from your plan.

What we collect

Nothing. There are no accounts, no cookies, no analytics and no tracking scripts. There are no ads at present.

If we add ads later, they will run in a sandboxed frame that can't read the page, and this page will say so before they appear. An ad network would receive your IP address and browser details, as any website you load does, and it would not receive anything from your plan.

What this can't protect against

• Browser extensions can read any page you open, including this one. Use a clean browser profile if you run extensions you don't fully trust.
• A browser policy can't stop a page from navigating away. Nothing in our code puts your plan in a link or navigates with it, and the code isn't minified, so you can read it to confirm that.
• A policy only protects you on the real site. If you've landed on a copy, its rules could differ, so check the address.
• Your clipboard still holds whatever you copied, and other software on your machine may be able to read it.
• Plans can contain secrets that aren't marked sensitive. Planreader catches common names, but it can't catch them all, so be careful with screenshots.

Who runs this

ALGD LTD, registered in Northern Ireland, company number NI744090, is the operator of this site. Since we hold no personal data from using the tool, there's normally nothing for us to access or delete. If you have a question or want to exercise a right under UK data protection law, email hello@planreader.io. You can also complain to the UK Information Commissioner's Office at ico.org.uk.

Last updated 2 November 2026.