Privacy
Your garden stays on your device
The plan, agenda, journal, photos and harvests are stored in your browser (IndexedDB). We do not receive them.
To keep them elsewhere, use the export: it creates a file that only you keep.
What leaves your device
Town search: what you type in the field goes to the French mapping agency’s geocoding service (IGN Géoplateforme) from 3 characters on, as you type; the full address if you chose “My exact address”. A US ZIP code goes there too, since it has five digits like a French postcode; a British postcode does not: it is looked up in our own tables. With “Use my location”, the position is first rounded to 0.01° (about 1 km). In the UK and the US, it is matched on your device against our postcode tables; in or near France, it is sent to IGN to find your municipality. Hortipix only keeps the municipality, the UK postcode district (“SW1A”) or the ZIP code, and that rounded position.
Weather: the garden’s rounded position goes to our server, which returns the forecast of the nearest station. The server keeps forecasts per station, never per garden. In and near the United States, our server passes this rounded position to the US National Weather Service, without your IP address, to find the forecast grid, and keeps the link between that position and the grid for 30 days, with no identifier.
Audience measurement: Umami Cloud counts page views, on the site and in the app, without cookies and without keeping your IP address; URL parameters (such as your garden’s identifier) are not sent. Nothing follows you from site to site. To opt out, turn on “Do Not Track” in your browser.
Hosting: like any host, Cloudflare receives technical requests (IP address, page requested) to serve and protect the site. Cloudflare is based in the United States; this transfer is covered by the Data Privacy Framework.
Later: accounts and payment
Accounts, sync and payment are not open yet. Before they open, this page will say what they store, where and for how long.
Controller and legal bases
The controller is the publisher named in the legal notice. Town search and weather answer your request; audience measurement and hosting rest on our legitimate interest in running and improving the site. Emails you send us are used to answer you.
Retention periods
Your garden: in your browser, until you delete it or clear the site’s data. We have no copy of it.
Audience measurement: Umami Cloud keeps visit statistics for 6 months.
Hosting: Cloudflare’s technical logs, IP address included, are deleted after 7 days at most.
Town search: Hortipix sends IGN no identifier; its service logs are IGN’s own (geoservices.ign.fr).
Emails: the contact mailbox is hosted by OVHcloud, a French company. Messages are kept for 3 years after the last exchange, then deleted.
Your rights
You can ask for access to, correction or deletion of data about you by writing to the address in the legal notice. You can also complain to the CNIL (cnil.fr) or your own data protection authority.