Privacy Policy

Last updated: June 14, 2026

This Privacy Policy explains what GardenGardenGarden collects and how we use it. Our contact email is [email protected].

Information you provide

We collect the information needed to run your account and the features you choose to use, including your email address, username or display name, password-auth account records, favorites, seed vaults, vault products, uploaded or camera-captured vault item images, notification preferences, and account settings. If you enable a community garden share page, the selected favorites and vaults are published with display-safe product details only. Shared vault items may include custom images you added to those items. Community garden pages do not include your email address, private notes, quantities, purchase dates, prices, stock alerts, or alert preferences.

We also collect messages or requests you send to us, such as support emails, privacy requests, and feedback. Please do not send sensitive personal information unless it is necessary for the request.

Catalog and operational data

The app stores catalog data from seed providers, operational processing records, and email delivery status so the service can operate and admins can diagnose problems.

We may collect ordinary technical data when you use the service, such as sign-in/session records, timestamps, pages or actions requested, IP address, browser or device information, error logs, and security events. We use this data to keep the app working, investigate abuse, and improve reliability.

How we use information

We use information to provide and personalize the service, maintain your account, save favorites and vault records, send notifications you request, troubleshoot bugs, secure the app, prevent abuse, build provider checkout links from selected favorites and vault items, understand product quality, comply with legal obligations, and communicate with you about the service.

Outbound click tracking

We track outbound product and provider checkout clicks to understand whether provider links work and to maintain site quality. Click records may include the product, provider, destination URL, referral URL, time of click, and hashed IP or user-agent values.

When you open a provider checkout link from Cart Builder, the provider receives the cart URL details needed to show the selected items in its checkout. Available provider discount codes may be included automatically in that link.

Cookies and similar technology

We use cookies or similar browser storage for authentication, security, session management, and core app preferences. We do not use advertising cookies or cross-site advertising pixels.

Chrome extension

The GardenGardenGarden for YouTube Chrome extension runs on YouTube pages so it can detect plant names mentioned in YouTube video captions. Anyone can use the extension without creating or signing in to a GardenGardenGarden account. The extension processes available caption text in your browser to find supported plant names. It does not send YouTube captions, video URLs, browsing history, clicks, watch activity, or detected plant mentions to GardenGardenGarden or to any third party while you watch videos.

The extension opens GardenGardenGarden only when you choose to open a GardenGardenGarden link, such as by Shift-clicking a plant chip or clicking the extension logo. Those links may include `utm_source=youtube_extension` so we can understand that a visit came from the extension. The extension does not collect personally identifiable information, health information, financial information, authentication information, personal communications, location, web history, user activity, or website content for transfer to us.

Analytics and session replays

We use self-hosted analytics to understand app usage and improve GardenGardenGarden. Analytics may include page views, coarse role information such as guest, user, or Pro user, browser and device details, referrer information, country-level location, and selected product events such as filtering, favoriting, vault actions, and upgrade clicks. We do not send email addresses, display names, user IDs, private notes, exact search text, custom product names, payment IDs, or raw product titles to our analytics system.

We may use masked session replays for usability debugging. Form fields and sensitive pages such as sign-in, password reset, account security, billing, admin, and impersonation sessions are excluded or masked. Replays are used to improve the product, not to identify users.

No sale, ads, or cross-site advertising

We do not use advertising pixels or cross-site advertising tools. We use only the data needed to provide, secure, maintain, and improve GardenGardenGarden. We do not sell personal information.

Email

We use Resend to send transactional emails such as welcome, account deletion, password reset, billing, and notification messages. Email delivery records are used to operate and troubleshoot email features.

Payments

Stripe processes ProProPro payments and manages hosted checkout and billing portal records. GardenGardenGarden does not store full payment card numbers.

How we share information

We may share information if required by law, to protect rights and safety, to investigate abuse, or as part of a merger, acquisition, financing, or sale of assets. We do not give anyone permission to use your information for their own advertising.

Retention

We keep personal information for as long as needed to provide the service, maintain security, resolve disputes, comply with legal or billing obligations, and operate backups. Some operational logs, email delivery records, and security records may be retained after account deletion when needed for legitimate operational, legal, or security reasons.

Uploaded custom vault item images are retained while needed for your vault items and account data, subject to replacement, deletion, account deletion, and operational backups.

Analytics events and masked session replay data are retained for up to 12 months.

Account deletion and choices

You can delete your account from account settings. You can also manage email alert preferences in your account. Account deletion removes your account and associated app data from active use, subject to records we must retain for security, legal, billing, or operational reasons.

You can contact us to request access, correction, export, or deletion of personal information associated with your account. We may need to verify your identity before completing a request.

International users

GardenGardenGarden is operated from the United States. If you use the service from another country, your information may be processed and stored in the United States or other locations where supporting infrastructure operates.

Children

GardenGardenGarden is not intended for children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child provided us personal information, contact us so we can take appropriate action.

Security

We use reasonable technical and organizational measures to protect the service, but no internet service can be guaranteed completely secure.

Changes to this policy

We may update this Privacy Policy as the service changes. If we make material changes, we will try to provide reasonable notice through the app or by email.

Contact

Privacy questions or requests can be sent to [email protected].