Privacy
The short version
You can read every page here without an account, and reading is not tracked to a person. If you do sign in, ppll stores your email address, your name, and the things you chose to keep — and one button deletes all of it, immediately and for good. There is no advertising, no third-party tracking, and nothing is sold to anybody.
If you have an account
Signing in is through Google. ppll asks Google for three things
and nothing else — openid, email and
profile — so it never receives your password and has no access
to your Gmail, Drive, Calendar or anything else in your Google account.
- Your email address. The only piece of personal information an account requires. It is stored because a weekly digest will need somewhere to send it, and because it is how we would reach you about your own account. It is never shown publicly and never given to anyone.
- Your name, as Google gives it, so the site can greet you with something other than an identifier.
- An identifier from Google that means "this is the same person as last time". It is not your password and cannot be used to sign in anywhere.
- Your sessions — one row per browser you are signed in
on, holding when it started, when it expires, and a coarse device word like
Android. Not your IP, not your full browser string. - What you keep: the lists you make, and — once following exists, which it does not yet — the people you follow. Lists are public unless you mark them private, and a public list is meant to be shared. Follows will be private to you. This bullet describes what an account can hold, so it is written to be true on the day following ships rather than rewritten afterwards; today there is no follow button.
That is the entire list, and it is not a promise we maintain by hand: Settings reads it back out of the database itself, so it cannot quietly fall out of date as the site grows.
Deleting your account
The Delete button on Settings removes your account, your sessions, your follows, your lists and your list memberships in a single operation. There is no waiting period, no soft-delete and no tombstone row kept behind — a record about someone who asked to be erased is the thing being erased. Signing in again afterwards makes a new account that remembers nothing about the old one. Export covers exactly the same set, so you can take it before you go.
One thing deletion does not cover, stated because the opposite would be a false promise: if you have claimed a page about yourself, that claim is a separate thing from your reader account — it is an assertion about a public figure, not part of your reading. Deleting your account leaves it standing. It also leaves the contact address you gave when you claimed it, which is stored with the claim and not with your account — so deleting the account does not delete that address. Both end when the claim does: write to hello@ppll.app and it is withdrawn. Settings says this at the moment you delete, too.
We do not remove it automatically, and the reason is worth stating: the only way to connect a claim to an account is to match the two email addresses, and a guess about who somebody is should not be the thing that decides what gets deleted. So we tell you instead of guessing.
Cookies
Two, both strictly functional, neither used for tracking or shared with anyone: one that keeps you signed in, and a short-lived one during sign-in itself that exists to stop somebody else completing a sign-in into your browser. Signed out, with no account, this site sets no cookies at all.
What is measured when you read a page
This part applies to everybody, signed in or not, and none of it is joined to an account — the measurements below are not linked to who you are, even when the site knows.
- Which pages you opened — including what is in the address
bar, because
/and/search?q=someoneare different pages and the second one is the useful one. - Which links and controls you clicked, and in particular whether you left for one of the channels a page lists, or opened the source a quote came from. Those two are the reason this site exists, so they are counted separately from ordinary links.
- What you typed into this site’s own search box, and how many people it matched. Nothing else you type anywhere is recorded. A name that matched nobody is the single most useful thing we learn — it is somebody telling us, in their own words, who is missing.
- How far down a page you scrolled (in quarters, not pixels) and how long the page was actually in front of you.
- Two signals about the site rather than about you: a control clicked three times in two seconds, and a click on something that looked pressable and did nothing. Each is stored as a count and the control’s label.
- Where the request came from: the country and rough city, a coarse
“operating system / browser” such as
Android/Chrome, the network your connection belongs to (a company name shared by thousands of people, not an address), and the host of the site that linked you — never the full URL you came from.
No cookie and no lasting identifier. A random number is kept in your tab’s own storage so that three pages read one after another are legible as one visit; your browser throws it away when you close the tab. It is not linked to anything, it cannot follow you to another site, and coming back tomorrow makes a new one. Your IP address is never stored — it is used to work out the country and then discarded.
We never record mouse movement, screen contents, keystrokes outside the search box, or anything typed into a form. That line — measurement, not session recording — is what the code is written against.
Where it goes
The measurement code is /static/b.js,
served by ppll.app and reporting to ppll.app. It is the only script on the page
that is not part of the page, and the site’s content security policy forbids
loading a script from anywhere else. A copy of the same measurements is sent
by our server, not by your browser to stats.kapps.dev, which is
ours, so that several of our sites can be compared in one place. Nobody else
receives any of it.
Stop counting this browser — that preference is stored in your browser’s local storage, on this site only, and is the one thing this site ever writes to your device.
If there is a page here about you
These pages are compiled, not authored. The people listed did not write them and have no account here. A page holds two things: links to places that person publishes — each one checked by hand before it appears — and beliefs compiled by korents.com, every one carrying a word-for-word quote and a link to where it was said.
Everything on a page is drawn from things that were already public and were published by the person themselves, or said by them in something they chose to take part in. Nothing here is private information, nothing is inferred about anyone, and there is deliberately no attempt at completeness — a few chosen channels are a signpost, and an exhaustive file on a person is a different and much worse thing.
You can have your page corrected, claimed or removed. Write to hello@ppll.app and say which page. No account, no form, and you will not be asked to prove anything.
Removing a page here removes it from ppll only. korents.com is a separate site with its own record of what people have said — this site reads from it and cannot change it. To be removed there too, write to hello@korents.com as well.
Where data lives
Everything is stored in Cloudflare D1 and served from Cloudflare Workers. Cloudflare processes it as our infrastructure provider. Visit measurements are deleted after 180 days. Account data is kept until you delete it, and then it is gone.