Privacy information

First-party statistical analytics

All visitors contribute only aggregate daily page-view and selected feature totals while aggregate statistics are enabled. Counts are grouped by cleaned public page path, event and limited source data. We also derive coarse device, browser, operating-system and, when provided by Cloudflare, country categories in memory and retain only daily totals. Raw IP addresses, full User-Agent strings, fingerprint data, private messages, search terms, form contents, private account identifiers and saved plot designs are not stored in analytics.

Aggregate counts are retained to preserve long-term service trends. They contain no visitor-level identifiers. Cloudflare operates the Site’s first-party D1 database as part of hosting and may process normal request/network information to deliver and secure the service. Analytics are not sent to advertising providers or used for cross-site profiles. The Site relies on the UK PECR statistical purposes exception only for aggregate statistics used solely to understand and improve this service; the persistent Privacy settings control provides a free, simple objection that stops future aggregate analytics in that browser. The UK GDPR basis for related limited processing is the operator’s legitimate interests in improving the service, subject to data minimisation and the objection right.

Optional visitor recognition is separate and off until you explicitly enable it in Privacy settings. It uses random Secure, HttpOnly first-party browser IDs, not Clerk account IDs, to estimate unique, new and returning browsers. Page events and session records for opted-in browsers are retained for up to 90 days; sessions use a 30-minute inactivity timeout. Visitor recognition is partial because it excludes browsers that do not opt in, use another device, clear storage or let the 90-day ID expire. Turning it off deletes available ID-linked event and session rows and clears its cookies; already aggregated daily statistics remain anonymous and are not linked back to a browser. The choice cookie lasts one year and can be withdrawn at any time.

New unique visitor, new/returning visitor and session reporting starts on the date shown in Admin Analytics; earlier periods remain aggregate-only and are never converted into visitor estimates. Engagement duration is not measured. Traffic without a usable referrer is labelled “Direct or unknown”. When a browser supplies an external referrer, the referring hostname (not its full URL or path) may be retained in aggregate source reporting to distinguish sources such as ChatGPT or Perplexity; this does not identify a conversation or prove an AI recommendation. Automated clients are filtered with a cautious request-header check, which will not identify every bot.

Cookies and device storage

Essential account and security storage supports sign-in, account recovery, abuse prevention and requested account features. A small sidebar preference cookie remembers whether the navigation is open. The Plot Planner uses browser storage for its tutorial preference and short-lived recovery of unsaved account-scoped edits. Monthly Jobs stores guest region, environment and checklist selections in this browser's local storage so the requested checklist can be resumed; signed-in preferences and completed task IDs are stored with the account in the Site database and are not used for analytics. These are not advertising identifiers. See the cookie and device storage details.

Saved Plot Planner designs

Saved plot designs are stored with the member’s account and are not publicly visible. The signed-in member can view and manage their own saved plots. The verified Site owner can also access a read-only saved plot snapshot where needed for site administration and support. Plot contents are not sent to Analytics.

The Weekly Plot newsletter

The Weekly Plot is an optional free newsletter. We use the verified email address associated with your account or the address you submit, the source of your signup, the consent wording and version, and the dates you requested and confirmed the subscription. Existing members are never enrolled automatically; a member can opt in during account registration, from a one-time invitation or in account notification settings. Visitors may subscribe at /newsletter without creating an account. A confirmation email is sent first, and the subscription begins only after the confirmation link is used.

Newsletter messages are sent through Resend using the verified Allotment Hub UK sending domain when configured. Resend receives the recipient address and message needed to deliver mail. We do not sell or share subscriber lists for advertising. Each email identifies Allotment Hub UK, replies go to allotmenthub@gmail.com, and each issue provides a one-click unsubscribe. Unsubscribing takes effect immediately; we retain the minimum email and suppression record needed to prevent accidental future sends. Unconfirmed signup records are removed after 30 days, and expired or used security tokens are periodically removed. Consent history is retained to demonstrate and honour the subscription choice.

You can request access, correction or deletion of your newsletter information by contacting allotmenthub@gmail.com. We may retain an unsubscribe suppression record where necessary to respect your request and prevent messages being sent again.

Services used when you request a feature

Clerk provides account authentication. When you use Plant Identifier, the selected image is sent to Pl@ntNet to identify the plant; a short-lived first-party guest identifier supports daily usage limits. Allotment Finder can send a postcode or place search to the relevant geocoding service and request nearby allotment map data. Map tiles are loaded from OpenStreetMap when the map is used. Those providers receive the request information and normal network metadata needed to answer it; their own privacy terms apply.

Tools & Supplies contains clearly disclosed Amazon.co.uk affiliate links. No Amazon advertising script or pixel runs on this Site. If you choose a link, Amazon receives the request and its affiliate tag and may use its own technologies under Amazon’s policies. Forum email notifications are delivered through the configured email provider only where that feature is used.

Feedback & Suggestions

If you submit feedback, we store the category, subject, details, an optional page address with its query string and fragment removed, an optional contact email, and any optional JPEG, PNG or WebP screenshot. If you are signed in, the submission is associated with your account internally. Guest submissions do not require an account. Submissions, contact details and screenshots are private to the verified site owner and are not sent to Analytics or shown publicly.

Contact details are used only if you ask us to follow up. Screenshots are stored privately and served only after owner authorisation. Feedback and screenshots are automatically deleted after 24 months when the feedback service is next used; the owner can delete an individual submission earlier. A short-lived hashed network key is used to limit repeated submissions; keys older than 24 hours are cleaned up when another feedback submission arrives. Please do not include passwords, authentication tokens or other sensitive information in feedback.

Future advertising

There are no advertising scripts or ads enabled on the Site now. Statistical analytics is separate from any future advertising consent. If advertising or other non-essential tracking is introduced, it will be blocked until the required valid consent is obtained, with separate accept, reject and withdrawal controls. Statistical analytics data will not be shared with advertising providers.

Owner testing and access

The verified owner’s signed-in activity is excluded at collection time across devices, and Admin paths are excluded. The owner can exclude an individual browser for signed-out testing; that preference is separate for each browser/device. Analytics reports and their APIs are available only to the verified site owner.