Privacy, plainly.

What Plop stores on your device

Plop saves normal-session tab titles and addresses, bookmarks, browsing history, discovery collections, discovery preferences, and settings so they are available when you return. Settings include your theme, appearance, search engine, control handle, link behavior, and normal-session website preferences for safe layout and ad blocking. Normal browsing also uses WebKit’s website storage, which can include cookies, cached content, and data saved by websites.

This information is stored locally. Plop has no account, developer-operated sync service, or remote browsing proxy. Device backups and other operating-system behavior are governed by your device settings.

Your browsing stays local

The app includes no advertising SDK or automatic browsing telemetry. Plop does not send us your browsing history, searches, ordinary bookmarks, or private tabs. We do not use your browsing data for advertising.

Discovery and optional community learning

Discovery downloads a shared catalog of website links from Plop’s service. The service periodically refreshes article links from selected public publisher feeds. Your interests, language and region preferences, discovery history, and collection names remain on your device; recommendations are ranked there. We do not use GPS for discovery.

Community learning is optional and off by default. If you enable it, Plop sends the catalog IDs of discoveries you rate or save, your thumbs-up or thumbs-down state, and whether each discovery is saved, using a random contributor credential. Those site IDs can reveal the discoveries you like or save. Collection names and organization, ordinary browsing history, account details, and your chosen interests, languages, and region are not sent.

The service stores a one-way hash of the contributor credential, discovery IDs, rating and saved state, and timestamps needed to maintain the contributions and limit abuse. This is pseudonymous information, not anonymous information. We use aggregate contributions to make a small adjustment to discovery quality after at least five contributors have reacted to an item. We do not sell this information or use it for advertising.

Contributions expire 90 days after their last update and are removed during service maintenance. Turn Community learning off to stop further contributions and request deletion of your existing contribution data. If you are offline, Plop keeps the deletion credential on your device and retries when it can reach the service. After deletion, a hashed revocation marker is kept to prevent an already pending request from recreating the contribution; it expires after 24 hours and is removed during the next maintenance run.

Catalog and contribution requests pass through our hosting provider, Cloudflare, which processes connection and security information such as IP addresses to deliver and protect the service. Plop’s application database does not store IP addresses or raw contributor credentials. Publisher websites receive ordinary browsing requests when you open a discovery and apply their own privacy practices.

Private tabs

Private tabs use a separate, nonpersistent WebKit data store. Plop excludes private tabs from its saved history, bookmarks, and restored normal session. Private website exceptions stay in memory. Closing all private tabs ends that private session.

Private browsing does not make you anonymous to websites, your chosen search provider, or your network. Files you deliberately save to Files, and anything you share with another app, remain outside the private session.

Websites, searches, and permissions

Browsing sends requests directly to the sites you visit. Searches entered in Plop’s address field are sent to your selected search provider—DuckDuckGo, Google, or Bing. Those services receive information needed to handle the requests, such as your IP address, the requested address or search, and applicable website cookies. Their own privacy practices apply.

If a website requests your camera or microphone, iOS and WebKit present the relevant permission flow. You decide whether to allow access. Content you provide to a website is handled by that website; Plop does not send a separate copy to its developer.

Ad-blocking rules

Plop’s curated content-blocking rules are bundled with the app and applied locally by WebKit. The rules cover selected third-party advertising and analytics hosts; they do not block every ad or tracker. Rule changes arrive through app updates. The blocker does not send your browsing activity to a rule server or a Plop backend. Its compilation cache contains the bundled rules, not your private page addresses.

Downloads and sharing

You choose where to save downloads through the system Files picker. Saved downloads remain there until you remove them, including downloads from private tabs. When you share a page or file, the receiving app or service handles it under its own privacy practices.

Your controls

• Use Settings → Clear browsing history to remove the app’s recorded history. This does not remove your bookmarks or open tabs.
• Use Settings → Clear website data to remove normal-session website data. Websites may ask you to sign in again. Close all private tabs to clear the separate private session.
• Remove saved bookmarks and close tabs individually. Use Close all in private tabs to end the private session.
• Change the search provider or ad-blocking settings at any time. Delete exported downloads in Files.
• In Discovery preferences, change your interests or disable Community learning. Manage saved discoveries and collections on your device.

Purchases, TestFlight, and support

Apple handles App Store purchases and TestFlight distribution. Apple may process purchase, testing, or diagnostic information according to its services and your sharing settings. Plop does not receive your payment-card details.

If you contact support, we receive the message and contact information you choose to send and use them to answer your request. No browsing logs are attached automatically. Please do not include passwords, payment details, or private browsing content.

This website

We have not added analytics scripts or advertising pixels to this site. Your light or dark appearance preference is stored in your browser. Its hosting service processes connection and security information needed to deliver and protect pages, and may use security scripts or cookies for that purpose. Following an external link takes you to a service with its own practices.

Early-access mailing list

When you join the early-access list on this website, we store your email address, the platforms you select (iPhone, macOS, or both), the signup time, and the version of the signup notice shown. We use this information to email you about early access, beta availability and invitations for the platforms you chose. Earlier Mac-only requests remain Mac-only unless you also request iPhone access. We do not sell the list or use it for unrelated advertising.

Requests are stored in our hosting provider’s database and are not publicly accessible. We also use aggregate request counts to limit abuse; our application database does not store IP addresses for these requests. Hosting providers process connection and security information needed to deliver and protect the form. We retain your request while managing early access. To withdraw it or ask us to delete your email, contact hello@unstucklabs.com.

Contact and policy changes

Plop Browser is published by STUCK IN THE SAND LLC. Questions about this policy can be sent to the support contact below. If the app’s data practices change, we will update this page and its date.