Stay ahead of the 2027 growing season — first month free on any plan until January 1st

Privacy Policy

Last updated: September 10, 2026

1. Who We Are

PlotPlanner (plotplanner.io) is a garden planning tool that turns your location, space, and goals into a personalized planting plan and grow guide. We're a small independent operation, and we treat your data like we'd treat our own. This policy explains what we collect, why, where it lives, and the control you have over all of it.

2. What We Collect

Account data (only if you create an account):

  • Email address and password — required for an email account. Passwords are never stored by us in plaintext; they're hashed and verified by Supabase Auth using industry-standard bcrypt.
  • Google account — if you choose "Sign in with Google", Google shares your email address (and your name, if your Google profile is public) with us so we can identify your account. We never receive your Google password. You can revoke this at any time in your Google account settings.
  • Optional profile details — name, ZIP code, and garden type (container, raised bed, in-ground, greenhouse). You can add, change, or remove these any time in your account dashboard.

Planner data (created when you use the tool):

  • ZIP code — used to look up your USDA hardiness zone via the public phzmapi service. Only the ZIP is sent; it is not stored with personal identifiers beyond your own account.
  • Garden details — your goals, space, soil notes, and chosen crops. These become your saved plan, stored under your account (or email, if you haven't created a password yet).
  • Generated plans — the plan document we build for you, saved so you can reopen it any time from your dashboard.

Billing data (only if you buy something):

  • Payments are processed entirely by Stripe. We never see or store your full card number. We store only what we need to operate your access: your plan, status, and how many plans you've used this month.

General browsing data:

  • Anonymous usage analytics — page views, device type, and general location, used to improve the tool.
  • Advertising cookies — if ads are running, Google AdSense may set cookies to serve relevant ads. You can opt out at Google Ad Settings.

3. How We Use Your Data

  • To generate your personalized garden plan and email you a link to it.
  • To keep your saved plans available across sessions, so "your email is your account" actually works.
  • To honor your subscription entitlements (which plans you've unlocked).
  • To occasionally send seasonal planting tips and product updates — only if you've asked for them. Every email has an unsubscribe link that works instantly.
  • To improve the planner based on aggregate usage. We don't build behavioral profiles of individual visitors.

4. Where Your Data Lives (Processors)

We build on managed services rather than running our own servers — that's intentional. Your data is stored with the following processors, all of whom maintain their own privacy and security programs:

Data may be processed in the United States and the EEA depending on the provider's infrastructure. Each listed provider operates under its own lawful data-processing framework.

5. Affiliate Disclosure

PlotPlanner participates in the Amazon Services LLC Associates Program and similar affiliate programs. We earn a small commission on qualifying purchases made through links on our site — at no extra cost to you. This is how we keep the free plan free, and we're transparent that product links benefit us.

6. How We Protect Your Data

  • Passwords are hashed with bcrypt by Supabase Auth before they ever touch our code. We cannot read them, and neither can anyone who gains access to our server.
  • Session tokens are short-lived JWTs, refreshed automatically, and stored only on your own device.
  • Server-side access control — your plans are only served to a request that proves ownership of your account. The database keys that bypass normal rules never leave the server.
  • Encryption in transit — every connection to our site and our processors uses HTTPS/TLS.
  • Minimization — we collect only what the product needs, and we delete the rest (see Retention).

7. Data Retention

  • Account and plans — kept until you delete them or delete your account, in which case saved plans are permanently removed.
  • Subscriber emails — kept until you unsubscribe or request removal.
  • Billing records — Stripe retains records it's legally required to keep for tax and fraud prevention, even after account deletion. We delete our own copies of your billing linkage where possible; the Stripe customer record may persist in de-identified form.
  • Analytics — retained per Google's standard retention policies.

8. Your Rights & Choices

Depending on where you live (including under the GDPR and CCPA), you can:

  • Access — see everything stored under your account from your dashboard, or ask us for a full export.
  • Correct — update your email, name, ZIP, and garden details any time in Account → Account Information.
  • Change your password — Account → Privacy & Security.
  • Port — your saved plans are yours; there's no lock-in. Ask us for a machine-readable export.
  • Delete everything (right to be forgotten) — Account → Privacy & Security → Delete account. This permanently removes your account, saved plans, and personal details and cannot be undone. You can also email us at privacy@plotplanner.io for manual processing.
  • Opt out of marketing email — the unsubscribe link in any email, or by contacting us.
  • Lodge a complaint — with your local data-protection authority if you believe we've mishandled your data.

9. Children's Privacy

Our tools are designed for adults managing a household garden and are not directed at children under 13. We don't knowingly collect personal information from children. If you believe a child under 13 has provided us personal data, contact us and we'll delete it promptly.

10. Changes to This Policy

We'll update this page whenever our practices change, and bump the "Last updated" date above. If a change is significant (for example, a new category of data), we'll announce it in our email updates and by a notice on the site.

11. Contact

Privacy questions or requests: privacy@plotplanner.io. Everything else: the contact form or support@plotplanner.io.