1ST READ · SUMMARY & DATA TIERS

Your notebook, your choices

PLUB — Placemaking Laboratory Urban Bureau, operated by Non Arkaraprasertkul. Notice updated 5 November 2026. This is a free pilot, supported by its community.

Three separate places for your data

Device: visits, stars, feelings, notes and photos stay in this browser until you delete them. Clearing browser data can lose them. Export a backup.
Cloud notebook: create an account and explicitly back up visits you want PLUB to store. A private notebook key opens your account on another device. Keep it secret; lost keys cannot be recovered. Cloud copies are private to your account through the app. PLUB's operator and hosting provider process them to run the service; this is not end-to-end encrypted storage.
Community: Share publishes the selected note, stars and feelings with your public name. Photos need a separate checkbox. The visit date is not published. Other people can copy public content.

01 · SHARED ROUTES

Optional shared hop notes

From Café hop you can explicitly publish a note with one to eight actual catalogue stops in your chosen order and your public name. Hop notes have no visit dates and are personal experiences, not verified walking routes. No private notebook entry is copied. Selecting photos does not upload them: a separate unchecked photo choice and the Publish button are required. Up to four resized, metadata-stripped photos can be public; others can copy them. Accounts support up to 100 shared hop notes, including hidden notes. Manage or unpublish them in Notes → Cloud notebook → My shared hop notes. Cloud export includes your hops, photos and reports, including hidden notes. Account deletion removes them.

02 · AGGREGATE STUDY

Research is optional

You can choose to contribute your saved cloud visits to research about which places people visit. This is off when you create an account. The research query uses saved place IDs and counts; it excludes notes, photos and visit dates. Public totals require at least five consenting accounts per place. Small groups are suppressed, though aggregation cannot guarantee anonymity in every circumstance.

Refusing does not limit the notebook. Turn it off in Notes → Cloud notebook → Research & account to exclude your visits from future results. Previously copied public aggregates cannot be recalled. There is no continuous travel log or background GPS collection. The map's location control uses your browser's permission; using it does not save a visit. You decide what you log.

03 · RETENTION & PROVIDERS

Storage, access and deletion

Cloud notebooks support up to 100 visits and four resized JPEGs per visit. Photo metadata is stripped before cloud storage. Your original device photo may be larger. Never publish another person's image or private details without permission.

Sign-in sessions expire after 30 days; their expired server records are removed by daily cleanup or the next login. Security rate-limit records contain salted IP hashes and are removed after 24 hours on API writes, with daily cleanup limiting idle retention to about 48 hours. Notebook keys and session tokens are stored as hashes on the server; neither belongs in a public link. Cloudflare hosts the Worker and D1 database and may process data outside Thailand. Provider recovery backups may remain for up to 30 days after live deletion.

In Notes you can edit device entries, export your device backup, export all cloud entries, restore individual cloud copies, delete cloud copies and their posts, delete your cloud account, or clear this device. Signing out leaves device entries on the device. Clearing a device leaves cloud copies intact. Deleting an account removes its live cloud entries, recommendations, photos and sessions. Export first if you need to keep them.

PLUB's original anonymous work ratings are separate: four answers about Wi-Fi/outlets/quiet/laptops, with salted IP hashes for daily limits. Their aggregate is public. They are not connected to a notebook account. Basemap, font and script providers receive ordinary connection information when the page loads; we do not send them your notebook contents. Map/directions links open external providers only when you choose them.

04 · CONDUCT & CONTACT

Be a good neighbour

Describe your own visit. Recommendations are personal experiences, not verified facts. No harassment, threats, spam, impersonation or other people's private information. Report a post if needed. Three distinct account reports temporarily hide a recommendation or hop note; the owner can restore it after review or remove posts without running an active discussion forum. The operator can also remove reposts of removed material.

To ask about your data or appeal moderation, contact nonsmartcity@gmail.com, the operator's public contact. Do not send notebook keys. Self-service export and deletion are available in your notebook.