Privacy Policy

Browsing the garden

There is no account, no sign-up, and no login for visitors.

The garden shows how many people have visited and how many are here right now. To count that, your browser generates a random token and stores it locally, then sends it back every thirty seconds while the tab is open. We record only that token and the times it was first and last seen.

There is no IP address, no fingerprint, and nothing derived from you or your device. Clearing site data makes the token disappear and you count as a new visitor — that is the trade for counting people without tracking them.

Clicks on a plant's link

When someone follows a plant through to its site, we add one to that plant's click count and nothing else. The number is public, because it is the clearest evidence a spot is worth paying for. Who clicked is not recorded and cannot be worked out from what we store.

What we store when you claim a spot

Shown publicly on your plant, because that is the product:

• the title you enter;
• your link;
• your one-line description, if you give one;
• the name you want credited, if you give one.

Kept privately, so we can support and reconcile the sale:

• the email address you give Stripe at checkout — used to contact you about your listing, refunds, and the artwork;
• Stripe’s identifiers for the payment, the amount paid, and the date;
• which spot you bought and where it sits in the garden.

We never see or store your card details. Payment happens entirely on Stripe’s own checkout page. Stripe is the processor and handles that data under its own privacy policy.

Analytics

If analytics is switched on, we use PostHog to count page views and a few product events — a plant being opened, checkout being started, a purchase completing. That is used to understand how the garden is used, nothing else. PostHog stores an anonymous identifier in localStorage and a cookie on your device.

We do not run advertising trackers, we do not build profiles, and we do not sell or share your data with anyone for their own purposes.

Cookies and local storage

• rank_garden_visitor — the random visitor token described above, kept in your browser's local storage, not a cookie.
• PostHog analytics — an anonymous identifier, only when analytics is enabled.
• rank_garden_admin — a sign-in cookie for the site operator’s admin page. It is never set for ordinary visitors.

We set no other cookies.

How long we keep it

Your listing stays for as long as it is planted. Payment records are kept while the site operates, because tax and accounting rules require keeping proof of sales. If a checkout is abandoned, the details you typed are deleted automatically when the reservation expires.

Your rights

You can ask for a copy of what we hold about you, ask for it to be corrected, or ask us to delete it. Email [email protected] and we will act on it. Deleting a listing removes it from the garden; we may need to keep the underlying payment record where the law requires it.

If you are in the UK or EU, you also have the right to complain to your data protection authority.

Links out

Plants link to other people’s sites. Those sites have their own privacy practices and we are not responsible for them. Outgoing links carry a utm_source tag so the person who planted can see the traffic we sent them; it identifies this site, not you.

Changes and contact

If this policy changes materially, the date at the top changes with it. Anything at all: [email protected].