Privacy

What is recorded

Our web server, like every web server, keeps an access log: the address your connection came from, the page requested, the time, the browser's description of itself, the page that sent you here and the country Cloudflare reports for your connection. We use these logs to keep the site working and to see which pages are read. They are kept for 14 days and then deleted.

When you follow an affiliate link, your browser may send a short ping to this site naming the page and the product. That is logged in the same way, kept for the same 14 days, and used only to count clicks by page.

Our daily counts (pages read, clicks by page, countries, referring sites) are kept, without any address or anything that identifies a person.

What is not done

No cookies are set. No analytics scripts, trackers or advertising code run here, and with one exception nothing is loaded from another company's servers: fonts, styles, photographs and the site's own scripts (the pot chooser and the grow simulator) are served from rootandwire.com. The exception is below, under eBay listings. A design you save in the simulator stays in your browser. We do not sell, share or combine anything about visitors.

The gallery

If you send a design to the gallery we store the design link, the display name you typed, your notes, a small picture of the design, and a salted hash of your address that limits how many designs one person can send; the salt changes every day and the old one is destroyed, so after a day the hash points at nobody. We also store whether the design was approved or declined. Nothing is shown until we have looked at it, there is no account, and the display name is the only thing about you that appears.

To have a design removed, email [email protected] with the design's link or its name and we will delete it, picture and all.

Settings on your device

If you change Your climate or the units, the choice is kept in your browser's own storage on this device, so the calendar and sizes stay as you set them. It is not a cookie and it is never sent to us. Until you change one, nothing is stored: the units follow your country (inches and °F in the US, Liberia and Myanmar, centimetres and °C everywhere else), or your browser's language if the country cannot be found. Clearing your browser's site data removes it.

Your country and the shop you see

To show the right shop and units, the page asks our server once a visit which country you are connecting from. Cloudflare works that out from your connection, and our server reads it from that one request and answers with the two-letter code. We do not store the answer on our server and we do not log that request. Your browser keeps the code until you close the tab, so it need not ask again. It is not a cookie, and it is not sent anywhere. If you choose a shop at the foot of the page, that choice is kept in your browser's own storage on this device, and clearing your site data removes it. Once you have chosen both a shop and units, the question is not asked at all.

eBay listings

If you are in the UK, or have chosen the UK as your shop, the supplies and kit pages show a few current eBay listings, each with a small photo. Your browser fetches those photos directly from eBay's image host (i.ebayimg.com), so eBay sees your address and your browser's description of itself, as any website you load an image from would. We ask browsers not to tell eBay which of our pages you are on. Nothing is sent to eBay about you beyond that, and we learn nothing from it. Visitors anywhere else, or who have scripts switched off, load nothing from eBay and see a Search eBay link instead.

Email

If you email [email protected] we keep your address and message for up to 12 months after we've dealt with it, then delete them. The message passes through SimpleLogin, which forwards it to our mailbox at Proton.

Links to other sites

Product links take you to Amazon (UK or US) and to eBay, chosen as described above. eBay links carry the eBay Partner Network's tracking code, third-party technology that tells eBay which partner and page the visit came from so it can credit a sale; Amazon links carry our Associates tag for the same reason. From the moment you arrive on their site, their privacy terms apply and they know you came from here.

Processors

Cloudflare, Inc. (network and edge): it handles the connection between your browser and our server, sees your address as part of that, and tells our server which country the connection comes from. Proton AG, which runs SimpleLogin and our mailbox (email to [email protected]).

Your rights

Ask us about, correct or delete personal data by emailing [email protected]. You can complain to the ICO.