BackPrivacy
In short
- Without an account, your journal stays only on your device, in your browser: nothing is sent.
- The account is optional. It’s only there to find your garden on another device.
- “Tell us about your day” is optional: your text is sent to Anthropic to spot your actions, then forgotten on our side.
- No advertising, no reselling, no profiling, no trackers.
What’s stored with an account
- Your email address.
- The entries in your journal: the two actions compared, the quantity, your choice, the difference in kg CO2e and the date of the choice.
- Technical dates: when the account was created, when it was last used, when each entry was received.
- While signing in: a fingerprint (hash) of the link sent, not the link itself, and a fingerprint of your session.
- To limit abuse: counters of requests per address and per IP address, stored as an encrypted fingerprint (neither the address nor the IP in plain text).
Why
To sign you in without a password, sync your journal between your devices and protect the service from abuse. Your address is only used to send you sign-in links: no newsletter, no other messages. This processing is based on the service you ask for by creating an account and, for protection against abuse, on the legitimate interest of keeping the service safe.
Where
- Cloudflare (Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, United States) hosts the site, the account and the journal. The database (Cloudflare D1) is restricted to the European Union.
- Cloudflare Turnstile checks, on the sign-in form and on “Tell us about your day” only, that the request doesn’t come from a robot. According to Cloudflare, it uses in particular the IP address and characteristics of the browser, only to detect robots (Turnstile’s policy). It’s only loaded when you use one of these forms.
- Resend (Plus Five Five, Inc., United States) sends the sign-in email: it receives your address and the message, which contains the link (unusable after 15 minutes). Resend keeps this data in the United States (Resend’s policy).
“Tell us about your day”
- When you start the analysis, the text you wrote (280 characters at most) is sent to Anthropic (Anthropic, PBC, United States), so that its Claude model can spot actions from the catalogue. Nothing is sent until you press “Read my day”.
- On our side, the text only passes through: it’s neither stored nor written in the server logs. Only counters are kept (number of analyses, outcome, number of actions spotted).
- At Anthropic, according to its official documentation (How long do you store my organization’s data?): “For Anthropic API users, we automatically delete inputs and outputs on our backend within 30 days of receipt or generation”, unless another agreement has been made, unless Anthropic needs to keep them longer to enforce its usage policy, or to comply with the law. According to the same page, an exchange flagged by its automated systems as breaching that policy is kept for up to 2 years (and its classification score for up to 7 years).
- That’s why the field reminds you: don’t write any personal information.
- To limit abuse and cost: a counter per IP address (encrypted fingerprint) and, if you’re signed in, per account, erased after 2 days at most. This processing is based on the service you ask for by starting the analysis.
For how long
- The account and the journal: as long as you use them. An account with no sign-in or sync for 24 months is deleted, along with everything in it. This deletion happens when the service is used (one check per day at most): if nobody uses the site for a while, it may happen a little after the 24 months.
- The sign-in link: 15 minutes, and it only works once.
- The session: 90 days, or until you sign out.
- Anti-abuse counters: 2 days at most.
Export, delete, your rights
- Export: “Export my data” in My garden gives you a JSON file (same format as the journal export, with your address and the date the account was created).
- Delete: “Delete my account”, in the same place, erases your address and your journal from our servers straight away and for good. The journal stays on your device.
- Sign out: “Sign out” ends the session on this device.
- For any question or to exercise your rights (access, rectification, erasure, portability, objection): [email protected]. You can also lodge a complaint with the CNIL, the French data protection authority.
Data controller
Guillaume Salle, 193 impasse d’azur, 83140, Six-Fours-Les-Plages — [email protected]. See also the legal notice.