Privacy Policy

Last updated: 2026-05-13 · Version 2026-05-13

1. What we collect

• Account info — email, display name, and (optionally) full name, address, and country to personalise the catalogue.
• Designs — the polygons, objects, and notes you create.
• Consent log — an append-only record of every consent (Terms, Privacy, Newsletter) including timestamp, IP, and user-agent. Required for GDPR / CAN-SPAM proof.
• Server logs — IP, request path, and user-agent for security and rate-limiting. Retained 30 days.

2. What we don't do

We do not sell, rent, or share your personal data with advertisers. We do not use third-party tracking pixels or behavioural ad networks on the Service.

3. Affiliate links + analytics

When you click an affiliate link, the merchant (e.g. Best Choice Products, Amazon) sets their own cookies under their domain. We don't see your purchase details — only the commission ping.

4. Email

We only send email if you have explicitly opted in via the signup form or the marketing toggle on your account page. You can withdraw consent at any time from the account page (the change is logged in the consent ledger).

5. Cookies

We use a single session cookie (gd_session) to keep you signed in. No third-party cookies.

6. Your rights

Depending on your jurisdiction (GDPR, CCPA, UK GDPR) you have the right to:

• Access the personal data we hold about you (email us);
• Correct inaccurate data (use your account page);
• Delete your account and all associated data (Account → Delete account);
• Export your data in a portable format (email us).

7. Children

The Service is not directed at children under 13. We do not knowingly collect data from children under 13.

8. Security

All traffic is TLS-encrypted. Passwords are stored as bcrypt hashes. The database is on a locked-down VPS with no public ingress except via the application.

9. Contact

Privacy questions or data requests: privacy@emeraldlawnandturf.com.