Privacy
Last updated October 30, 2026.
What we keep
- Account: username, a salted hash of your password (never the password itself), your email (needed to reset your password, and never shown to other members), when you joined and last logged in, and the state you choose for distances.
- What you add: your want list, alert settings (ntfy topic, webhook, email), wanted posts, photos you upload, and messages you send other members.
- Cookies: only the essential ones: one to keep you logged in. No advertising, analytics or tracking cookies, so there's no cookie banner.
- Contact form: what you send, with the name, email and shop you give, kept until we've dealt with it.
- Visits sent to shops: which listing was clicked and when, without who clicked it. Shop links carry a tag naming this site as the referrer, which the shop can see.
- Fonts: pages load their typefaces from Google Fonts, so your browser asks Google's servers for them (Google sees your IP address but sets no cookies for this).
- Server logs: your IP address may appear briefly in the hosting provider's logs and in short-lived memory used to stop abuse (like repeated log-in attempts); it isn't stored in the database.
- Anonymous interest counts: how many people a day searched for, viewed or clicked through to each plant, and which shop. Only the totals are stored, never who did it.
- Want history: when a plant was added to or removed from a want list or wanted post, and, if you choose to say, whether you got it. Stored without your name or account, so it stays even if you delete your account; if you opt out of demand totals in settings, none is kept.
How it's used
To send your alerts and run the features you use. Your want list is counted in anonymous demand totals that growers can see (only plants wanted by at least 2 people, never with names); you can opt out in settings. We don't sell or share your data, and don't show your email or contact details to other members.
Who else sees it
Messages are seen by you and the member you're messaging. Alerts pass through the services you choose (ntfy, Discord, Slack or email). The site runs on a hosting provider that stores the database.
Your choices
Download all your data, change or remove alert channels, opt out of demand totals, or delete your account and everything you made, all from your settings page. Alert emails say how to stop them.
Children
Carnivorous Collections isn't for children under 13 and we don't knowingly keep their data. If you think a child has an account, tell us and we'll delete it.
Changes
If this policy changes in a way that matters, we'll say so on the site.
Contact
Use the contact form, or email anthony@carnivorouscollections.com .