Privacy policy
Version 1 — subject to legal review. This text has not been reviewed by a lawyer yet and is not legal advice. Last updated: October 19, 2026.
This policy explains what data PlebHelp keeps, why, for how long and who can see it. It follows Brazil's General Data Protection Law (LGPD, Law 13,709/2018). Data controller: PlebHelp Team. Contact: contato@plebhelp.com.
1. What we keep
| Data | When | Why |
|---|---|---|
| Account: email and password, or your Nostr public key (npub). The password is stored in a way that cannot be read back. | When you create an account | To let you sign in and manage your campaigns |
| Campaign: title, story, images, goal, category, country, language and the Lightning wallet that receives donations | When you create or edit a campaign | To show the campaign and send donations to the right wallet |
| Donation: amount, date and time, and the Lightning payment code. The name always shows as “Anonymous”. | When someone donates | To show the campaign total and keep a payment from counting twice |
| Report: a code made from your visit, which does not show your name or email, and the text you wrote, stored encrypted | When you report | To review the report and prevent repeated reports |
| Sign-in: a cookie that keeps you signed in | When you sign in | To know it is you while you use the site |
| Abuse protection: how many times someone tries to sign in, donate or report in a short time | While you use the site | To stop bots and attacks |
| Action history: what was done in the account and in moderation, with date, time and IP address | While you use the site | To investigate abuse and comply with the law |
We never keep your seed or private key. Never ask for or share these keys here. We do not use advertising or third-party tools that follow you around the internet. Your language choice is saved in your browser.
2. What is public
The campaign (title, story, images, goal and total donated) is public while it is up. Each donation shows on the campaign as “Anonymous”, with amount and date. The recipient sees the payment in their own wallet, as with any Lightning payment.
3. Why we may use this data (LGPD legal bases)
- To provide what you asked for, such as your account and campaign (art. 7, V).
- To keep the site safe and investigate scams and reports (legitimate interest, art. 7, IX).
- To comply with the law, such as keeping access data as required by Brazil's Internet Civil Framework (Marco Civil da Internet) (art. 7, II).
4. How long we keep it
| Data | Period |
|---|---|
| Account | While the account exists. After you ask us to delete it: 30 days |
| Campaign | While it is up. After it is taken down: 2 years, to handle reports and scams |
| Donation | While the campaign exists plus 5 years, to keep the history true |
| Report | 2 years after it is resolved |
| Sign-in cookie | Until you sign out or 30 days without use |
| Abuse protection | 24 hours |
| Action history | 6 months, the minimum under the Marco Civil da Internet, art. 15 |
We do not delete donation history to hide what happened. When the period ends, we delete the data or remove everything in it that identifies you.
5. Who can see it
- PlebHelp moderation, to review campaigns and reports.
- The people who look after the site, only when they need to fix a problem.
- The hosting company that stores the data, in Brazil.
- Authorities, only when the law requires it or under a court order.
We do not sell or rent your data.
6. Your rights
Under the LGPD (art. 18), you can ask:
- whether we keep data about you, and to see it;
- to correct wrong or outdated data;
- to delete, block or remove identification from unnecessary data;
- for a copy of your data to take to another service;
- who we share your data with;
- to delete your account and withdraw any consent you gave.
Some data stays on file even after you ask us to delete it, when the law requires it (such as the action history) or to keep the donation history true. You can also file a complaint with Brazil's National Data Protection Authority (ANPD).
7. How to ask
Write to contato@plebhelp.com, preferably from the same email or npub as your account. We may ask you to confirm the account is yours before we reply. We reply within 15 days (LGPD, art. 19).
8. Security
The site uses a secure connection (https). Report text is stored encrypted. No system is 100% secure. If an incident puts you at risk, we will tell you.
9. Changes to this policy
This policy may change. The date of the last change is at the top. If a change is important, we will post a notice on the site before it takes effect.
10. Contact
PlebHelp Team · contato@plebhelp.com