Privacy policy
Last updated: 2026-06-06
We collect almost nothing. No sold data. Advertising is disabled by default and only activates when PlantSage explicitly enables its AdSense integration. Below: the full list of what we touch, why, and how you stop it.
The short version
- We don't track you across the web.
- We don't sell your data to anyone, ever.
- Advertising is disabled by default; if enabled later, it will be disclosed here and in ads.txt.
- We use one cookie for login + minimum necessary localStorage for UI preferences.
- Cloudflare logs anonymous request data (standard hosting). We don't see individual visitors.
What we collect
Nothing personally identifying. Cloudflare logs aggregated metrics (IP-derived country, browser type, page paths) at the network level — we see only statistics, never your IP. No analytics scripts loaded in your browser. Google advertising tags are not loaded unless the AdSense integration is explicitly enabled in production.
Email address only. Stored in our database. Used only to send newsletters you opted in to. Unsubscribe link in every email. We never sell, share, or use it for retargeting.
Email + the content you provided. Used only to credit you (if accepted) and follow up on edits. Optional fields stay empty if you leave them empty.
Email + magic-link auth cookie. Cookie is HTTP-only, secure, SameSite=Strict. Used to keep your session active. Expires after 30 days inactivity. No password stored — we use magic links via email.
Cookies & storage
We use the minimum cookies + localStorage needed to operate the site:
Clear them anytime via your browser settings.
Third-party services
- Cloudflare — hosting + CDN. Sees IP at network level only, no scripts in browser.
- Neon — Postgres database hosting. Stores only what we explicitly write.
- Resend — transactional email delivery for magic-links + newsletter (only if you opt in).
- Stadia Maps — Stamen Watercolor map tiles on plant distribution maps. Browser fetches images; no data sent back.
- Anthropic (Claude) — server-side only, for content generation. Plant data sent for processing; no user data involved.
- Google AdSense — optional advertising partner. Disabled unless production env vars explicitly enable it.
Your rights (GDPR)
Under GDPR (and similar regulations), you can:
- Access — request a copy of data we hold about you
- Rectify — request correction of inaccurate data
- Erase — request deletion ("right to be forgotten")
- Restrict / object — limit how we process your data
- Portability — receive your data in machine-readable format
To exercise any of these: privacy@plantsage.eu. We respond within 30 days. You may also file a complaint with your local data-protection authority.
Changes & contact
If we materially change this policy, we'll update the "Last updated" date above and (for newsletter subscribers) notify by email.
Questions: privacy@plantsage.eu
Get archive updates
Occasional email when substantial new content lands — plant profiles, seasonal growing notes, folk-remedy additions. Free, no tracking, unsubscribe anytime.