Our Privacy policy
Last updated: 2026-10-10
We collect almost nothing. No sold data. Advertising is disabled by default and only activates when PlantSage explicitly enables its AdSense integration. Below: the full list of what we touch, why, and how you stop it.
The short version
- We don't track you across the web.
- We don't sell your data to anyone, ever.
- Advertising uses Google AdSense only when the production integration is enabled, with Consent Mode defaults set before the ad script loads.
- We use one cookie for login + minimum necessary localStorage for UI preferences.
- Cloudflare logs anonymous request data (standard hosting). We don't see individual visitors.
What we collect
Nothing personally identifying. Cloudflare logs aggregated metrics (IP-derived country, browser type, page paths) at the network level — we see only statistics, never your IP. No analytics scripts are loaded in your browser. Google advertising tags load only when AdSense is enabled in production and after consent rules are applied.
Email address only. Newsletter signup is currently paused while PlantSage runs without a live subscriber database. When it returns, email will be used only for newsletters you opted in to, with an unsubscribe link in every email.
Email + the content you provided. Used only to credit you (if accepted) and follow up on edits. Optional fields stay empty if you leave them empty.
Email + magic-link auth cookie. Cookie is HTTP-only, secure, SameSite=Strict. Used to keep your session active. Expires after 30 days inactivity. No password stored — we use magic links via email.
Cookies & storage
We use the minimum cookies + localStorage needed to operate the site:
Clear them anytime via your browser settings.
Third-party services
- Cloudflare — hosting + CDN. Sees IP at network level only, no scripts in browser.
- Static PlantSage archive — public pages are served from static JSON snapshots, not a live visitor database.
- Resend — transactional email delivery for magic-links + newsletter, only if those features are enabled and you opt in.
- Stadia Maps — Stamen Watercolor map tiles on plant distribution maps. Browser fetches images; no data sent back.
- Anthropic (Claude) — server-side only, for content generation. Plant data sent for processing; no user data involved.
- Google AdSense — advertising partner when enabled. Authorized seller information is published at ads.txt.
Your rights (GDPR)
Under GDPR (and similar regulations), you can:
- Access — request a copy of data we hold about you
- Rectify — request correction of inaccurate data
- Erase — request deletion ("right to be forgotten")
- Restrict / object — limit how we process your data
- Portability — receive your data in machine-readable format
To exercise any of these: privacy@plantsage.eu. We respond within 30 days. You may also file a complaint with your local data-protection authority.
Changes & contact
If we materially change this policy, we'll update the "Last updated" date above and publish the change on this page.
Questions: privacy@plantsage.eu
Get archive updates
Occasional email when substantial new content lands — plant profiles, seasonal growing notes, folk-remedy additions. Free, no tracking, unsubscribe anytime.