Privacy policy

PlumeTrack is a small independent editorial site about free puzzle games on Google Play. This policy explains, in plain English, what personal information we handle, why we handle it, and what you can ask us to do with it. We follow the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

Who is responsible

The site plumetrack.com is operated by the PlumeTrack editorial desk in Melbourne, Victoria, Australia. For any privacy question, or to make a request about your information, write to hello@plumetrack.com and we will reply within a reasonable period, ordinarily inside 30 days.

What we collect

We keep the amount of personal information to the minimum a site of this kind needs to run.

• Subscription details. If you send the form on the home page: the e-mail address you type, the name you type if you choose to give one, and the fact that you ticked the consent box together with the moment you did it. The form has no telephone field and we never ask for one.
• Notification identifiers. If you allow browser notifications, our provider creates a subscription identifier for that browser on that device, together with technical details such as browser family and operating system.
• Server records. Our hosting provider records the usual technical entries for each request: IP address, date and time, the address requested, the referring page and the browser user-agent string.
• Your choice about storage. One entry named userConsent is kept in your browser to remember whether you accepted or declined. It stays on your device and is not sent to us as a profile.

We do not run advertising networks, behavioural profiling or third-party analytics on this site, and we do not buy or sell contact lists.

Why we handle it, and on what basis

• To send the updates you asked for, and to tell you when the Plus plan becomes active — handled only with your consent, which you may take back at any time.
• To deliver browser notifications — again only after you accept, either in the band at the bottom of the page or through the form.
• To keep the site available, diagnose faults and protect it from abuse — this is a normal function of a hosting service and relies on our legitimate operational need rather than consent.
• To answer an e-mail you send us, using the address you wrote from.

Who else handles the information

We use a small number of service providers who handle information on our instructions:

• OneSignal, Inc. — delivery of browser notifications and of e-mail updates. OneSignal receives the address you submit, the subscription identifier for your browser, and the tags we attach (the site domain, the name you supplied and the fact that the record came from the form).
• Hosting and content delivery. Our hosting and CDN providers process server records so that pages and images reach you.
• Google LLC — only in the sense that the fonts used for the page are requested from Google Fonts, and that outbound links point to Google Play listings. Google is not given your subscription details by us.

We do not disclose personal information to anyone else except where an Australian law or a court requires it.

Information sent outside Australia

OneSignal and our content delivery provider operate servers outside Australia, chiefly in the United States and the European Union. By subscribing you accept that your e-mail address and notification identifier will be held on those overseas servers. We take reasonable steps under APP 8 to use providers who publish binding data protection commitments, but overseas privacy laws may differ from Australian law.

How long we keep it

• Subscription records: for as long as you stay on the list, and for up to 12 months after you unsubscribe so that we can show the unsubscribe was actioned.
• Notification identifiers: until you revoke notification permission in your browser or clear site data.
• Server records: for the short retention window applied by our hosting provider, ordinarily measured in weeks.
• E-mail correspondence: for up to 24 months after the exchange ends.

Direct marketing and the Spam Act

Every message we send identifies PlumeTrack as the sender and carries a working unsubscribe link, in line with the Spam Act 2003 (Cth). One click is enough, no reason has to be given, and we action the request without delay. Browser notifications can be switched off at any time in your browser settings for this site, without contacting us.

Your rights

Under the Australian Privacy Principles you may ask us to give you access to the personal information we hold about you, to correct it if it is wrong or out of date, or to delete it where we are not required to keep it. Write to hello@plumetrack.com from the address in question, or tell us which address the request concerns.

If you are not satisfied with how we answer, you may complain to the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au, by telephone on 1300 363 992, or by writing to GPO Box 5218, Sydney NSW 2001.

Young people

This site is written for adults and is not intended for anyone under 15 years of age. We do not knowingly collect personal information from children under 15. If you believe a child has subscribed, write to us and the record will be deleted.

Security

The site is served over an encrypted connection. Subscription records live inside our provider account, which is protected by a strong password and multi-factor authentication, and only the editorial desk has access. No online service can promise perfect security, so we ask you not to send us sensitive personal information by e-mail.

Cookies and browser storage

The technical detail about what is stored in your browser, and how to clear it, is set out on the Cookies & storage page.

Changes to this policy

If this policy changes, the new version replaces this one on this page and the date at the top is updated. Where the change materially affects subscribers, we say so in the next update we send. This version takes effect on 18 August 2026.