Privacy Policy
Last updated: August 2026
What we collect
- Account information: username, email address, and password hash when you register. Optional Google sign-in may share your Google name and email.
- Profile content: optional bio, uploaded plant photos, plant nicknames, locations, and owner notes.
- Social activity: comments, sunbeams and sunbursts, follows, discoveries, challenge completions, and points.
- Order information: email address, sign customizer config, chosen classification, and optional shipping/gift notes when you place a sign order.
- Technical data: Django session cookie and CSRF token. No analytics or third-party tracking cookies are used today.
How we use your data
We use the information above to operate the plant community, display plant pages and community activity, fulfill sign orders, moderate content, and communicate with you about your account or orders.
Payments
Card payments are processed by Stripe. Your full card number never touches our servers. Stripe receives the information required to process the payment, such as your card details, billing address, and order total. We store your email address and order details (sign configuration, chosen classification, and any gift or shipping notes) so we can fulfill the order and contact you about it.
Third-party services
- Stripe: processes payments directly. Your card details never touch our servers.
- Google: optional Google sign-in via OAuth.
- Hosting provider: stores site data and serves pages.
Retention and deletion
We keep your data as long as your account is active. You can request account deletion by emailing the contact address below; deletion will remove your profile, plants, photos, comments, and orders from the site.
Contact
Questions or data requests? Email [email protected] (placeholder — owner to update).