Security & privacy

#In one minute

• Plurion never asks for your Second Life password, and never holds the L$ from your sales.
• Your sign-in codes come from the sign-in page and show up in your local chat. Never give a code to anyone.
• Plurion alerts you, by notification and in your local chat, when someone signs in to your account from a new device, when your password changes, and when a payout setting or your team changes.
• Every Plurion object signs what it sends, so a fake object or a stolen script can’t sell or deliver in your name.
• Export your data whenever you like. After you close a shop or your account, nothing is erased for 30 days.

#Signing in

Your avatar is your identity. Plurion never receives your Second Life password. You sign in with an eight-digit login code, or with an optional Plurion password set on your Hub. The code comes to your local chat (Login code on the sign-in page) and expires after 10 minutes. After 5 wrong passwords, you wait up to 15 minutes. A session lasts up to 7 days. Details: Your account & shops.

#Recognize a real Plurion message

IM phishing is common in Second Life, and merchants are a target. Four ways to tell a real Plurion message from a fake:

• A login code message reads exactly “Your Plurion login code: … — expires in 10 minutes. Never share this code.” It has no link, and nobody from Plurion will ever ask you for the code.
• A security alert in your local chat is one of four fixed sentences, such as “Plurion: your account was just signed in from a new device. Not you? Open your dashboard, Hub → Security.” It never has a link, so you open your dashboard yourself (security alerts).
• Setup links only appear right after you touch your own object, in Second Life’s “Load web page” box (for a vendor, “Set up this vendor”), sometimes also in your local chat. They never come by IM.
• The dashboard lives at app.plurion.io. Check the address bar before typing a password.

#Your objects can’t be faked

Each Plurion object gets its own secret key when it connects to your shop, and signs every message with it. A message not signed with that key, or a replayed one, is refused. So a fake object or a stolen script can’t record a sale or trigger a delivery in your name, and one object can’t speak for another.

The technical detail

Every message an object sends is signed with HMAC-SHA256 and carries a timestamp. Messages that change something, such as a sale or a split report, also carry a one-time nonce, so a forged or replayed one is rejected. Routine check-ins, harmless to repeat, are accepted only within five minutes of their timestamp. The full security model is available on request, through the security page.

#Your money, and what we keep

1. Where are my items?In your DropBox, on your land. It hands one over only on an order signed by Plurion. A no-copy item leaves it once given.
2. Where does my money go?Straight into your wallet. Second Life pays the owner of the Plurion object the buyer paid (your vendor, say). Nothing is held for you, so there’s no payout to wait for. Store credit bought at your Plurion Terminal reaches you the same way. Plurion only records what each customer can still spend.
3. What can leave my wallet?Only money tied to a payment your Plurion objects received, sent by them with the DEBIT permission you gave them: a refund, your partners’ shares and, on Free, Plurion’s 5% (how it’s taken). That 5% and the Pro time you buy at the Merchants Terminal are all Plurion ever receives.

For each customer we keep their avatar key and name, their purchases, and what they send us: support messages and an optional customer-hub password, stored hashed. Visitor counters also record the avatars they detect. We keep no real-life identity, address or payment details. Each shop’s data is kept apart from the others. Inside your shop, each teammate sees what their role allows. See Team, roles & permissions.

#Where your data lives

Your database and its cache, the dashboard and error monitoring are hosted in the EU. Plurion’s backend runs in Frankfurt, next to the data, so a sale from a North American region is processed in Europe. Requests first reach the network point nearest their sender, and the image proxy runs close to the caller. Three things aren’t on that list: short-lived request logs and the website’s page-view counts, both kept by the network provider, and any email you send us.

#Export your data

1. On the webOpen your shop’s SettingsScroll to Export your data. Owners and admins can export.
2. On the webPick a fileDownload summary (recommended): a readable file with your shop, products, sales, customers, vendors and DropBoxes. Download backup: a complete technical copy, for moving to another system. Secrets are left out.
3. On the webIt downloads at onceThere’s no waiting period and nothing to request.

#Closing a shop

Only the shop’s owner can close it. In Settings → Danger zone, click Delete this shop, then Continue, type DELETE and click Schedule deletion. The shop closes at once. Its vendors stop selling and refund anyone who pays, and redeliveries stop. Your Plurion account and other shops aren’t touched. Export first if you might want a copy.

#Closing your account

This closes every shop you own and your login. On your Hub, Settings → Close account… opens a page that lists each shop with what closing it costs: Pro time left (not refunded), team access, pending partner payouts and unspent customer credit. A paid delivery still on its way blocks the closure until it’s delivered. Export first. The Export data button next to a shop opens its Settings.

1. On the webConfirm it’s youEnter your password, or click Send me a code and type the 8-digit code that shows up in your local chat. Signed in with a login code in the last 15 minutes? There’s nothing to enter.
2. On the webType your avatar nameThen click Close my account. Your shops close at once. Their vendors stop selling and refund anyone who pays, and redeliveries stop. Your other devices are signed out.

Your purchases in other shops stay with those shops. Shares other shops pay you keep arriving in Second Life, but you won’t see them on Plurion anymore.

#Common questions