Security & privacy at Plangku

Hosted on Tencent Cloud

Application servers, database and file storage run in the Singapore and Jakarta regions.

HTTPS enforced

Every HTTP request is redirected to HTTPS, customer domains included. Certificates are issued and renewed automatically.

App runs without root privileges

The application container runs as an ordinary system user, not an administrator.

No customer files on app servers

Uploaded photos live in separate object storage, never on the servers’ disks.

Google sign-in only

Plangku never sees or stores your password. Your Google account’s protections, such as 2-step verification, still apply.

Session tokens stored as hashes

The database keeps only a SHA-256 hash of each sign-in token, so database contents can’t be used to sign in as you.

Protected session cookies

Cookies are HttpOnly, Secure and SameSite, and only sent to plangku.com. Customer websites never receive them.

Sessions expire

A session that goes unused for 30 days ends, and you sign in again.

Access checked on every request

The editor, data and settings always confirm the website is yours, or that you’re on its team with permission for that action, before reading or changing anything.

Team permissions, one by one

Owners can invite people and choose exactly what each of them may do. An invitation can only be accepted with the Google account it was sent to. Only the owner can give a website away or delete it.

AI sections sanitized on the server

HTML is limited to an allowlist of tags, CSS is scoped to its own section and all values are escaped. Public pages are sanitized again when rendered.

Photos re-encoded

Every upload is decoded and saved again as WebP (max 8 MB, 2000 px). Original files are never served, and metadata such as GPS location is dropped.

Security headers

MIME-sniffing protection, a strict referrer policy, and clickjacking protection for the dashboard and editor.

A careful website importer

Website cloning only fetches public internet addresses (internal networks are blocked), follows robots.txt and identifies itself as PlangkuImporter.

Plangku adds no ads or trackers

Published websites are HTML from our servers. Trackers such as Meta Pixel or Google Analytics load only when the website’s owner adds them, and can be set to wait for the visitor’s consent. Only their IDs are stored, never free-form code.

Forms protected from spam

Every form asks visitors a small sum, refuses messages sent within 2 seconds or many times from one connection, and only accepts posts from the website itself.

Minimal account data

From Google we use only your name, email address and profile photo.

Cookieless visitor stats

Visits are counted without cookies and without storing IP addresses. Visitor identifiers change daily, and stats are deleted after 13 months.

Drafts stay separate from your live site

Changes go public only when you publish. Version history keeps earlier designs so you can restore them.

Form messages are for the website’s owner

Messages sent through forms are kept in that website’s Inbox: only the owner and team members with the Inbox permission can read them, and emails go only to the addresses chosen there. Messages can be deleted at any time. Senders’ IP addresses are not stored.

Deleting a website deletes its data

Deleting a website also removes its pages, its product/menu data, its form messages and every photo uploaded to it.

AI features are optional

Text is sent to the AI provider only when you use AI sections or AI translation.