Privacy Policy
PlusPlus is a Slack app that tracks karma points awarded between members of a workspace. This policy describes exactly what data the app handles, what it stores, and how you can have it removed. It is written to match what the software actually does.
What we store
When you install PlusPlus and use it, the app stores the following in its database:
- Slack identifiers — workspace (team) IDs, channel IDs, and user IDs. These are the opaque IDs Slack assigns (e.g.
U012ABCDEF), not names or email addresses. - Karma counters — each user's running karma total and their all-time peak, scoped to the workspace.
- Channel settings — the reply mode (thread or channel) and snark level for a channel, plus the user ID that last changed them.
- Timestamps — when karma was last applied, when settings were last changed, and when the app was installed.
- Workspace bot token — the OAuth bot token Slack issues at install time, so the app can post replies. It is encrypted at rest (AES-256-GCM) and is a credential, not personal data.
What we do not store
- Message content. Incoming Slack events are processed in memory only to detect
++/--patterns. The text of your messages is never written to disk or logged. - Profile data. No real names, display names, email addresses, avatars, or any other Slack profile fields.
- Cross-site tracking. No advertising identifiers and no third-party trackers. This website uses Vercel Web Analytics (see below), which is cookieless — no cookies are set, and you are not tracked across other sites.
How your data is used
Stored data is used solely to provide the app's features: keeping karma scores, rendering the
/leaderboard, applying per-channel settings, and posting replies on your behalf.
We do not sell, rent, or share your data with third parties, and we do not use it for advertising or profiling.
Where your data is stored
Data is stored in Amazon DynamoDB. The app runs as a small server-side service. We rely on these infrastructure providers (AWS, the application host, and Vercel for this static website) purely as data processors; they do not receive your data for their own purposes.
Website analytics
This website (the page you are reading) uses Vercel Web Analytics to count page views and visitors in aggregate. It is privacy-friendly and cookieless: it sets no cookies, uses no persistent identifiers, and does not track you across other websites. It applies only to this marketing site — the Slack app itself does not use it. See Vercel's analytics privacy documentation for details.
Data isolation
Every record is keyed by workspace (team) ID. Karma totals, settings, and tokens for one workspace are never readable from another. The leaderboard only ever returns scores from your own workspace.
Retention and deletion
Data is retained while the app is installed. Removing PlusPlus from your workspace revokes the bot token. To have your workspace's stored data (karma counters, settings, and the stored token) deleted, contact us and we will remove it.
Contact
Questions, or a request to access or delete your data? Email contact@pluspluskarma.dev. We aim to respond within 2 business days. You can also open an issue on GitHub, though that requires a GitHub account — email does not. See also our support page.
Changes to this policy
If this policy changes, the "last updated" date above will change with it. Material changes will be reflected here before they take effect.