Privacy Policy

Last updated September 27, 2026

The short version

• You can use Hannah's Plants without an account. Then everything you make stays in your own browser and is never sent to us.
• If you log in, your gardens are also saved to your account so they follow you between devices.
• We don't run ads, we don't use analytics or tracking cookies, and we don't sell or share your information.
• You can delete your gardens or your whole account yourself, any time, from the Account page.

Without an account

Your gardens, plant plans, custom plants and varieties, hardiness zone, calendar check-offs, tour progress and whether you have read the herb-information notice are saved in your browser's local storage on your device. They are not sent to us. Clearing your browser data removes them.

The “Find my zone by ZIP” tool looks your ZIP code up in a table hosted on this site. Your ZIP code stays in your browser.

With an account

When you sign up or log in, we collect:

• Your email address (and, if you use Google sign-in, the name and email address on your Google account). Passwords are handled by Google's Firebase Authentication service. We never see or store your password.
• Your garden data: the gardens, plant plans, custom plants and varieties (including any photo you attach to one), zone, and the optional communication email you enter on the Account page. This is stored in Google Cloud Firestore and is readable only by your own account.

We use this information only to run the site: to sign you in, to keep your gardens in sync across your devices, and to send the account emails described below.

Your archive

When you archive a garden, a copy of it (its beds, plants, planting dates, calendar ticks, and the notes you write) is kept in your archive, in this browser and, if you're logged in, in your account. The archive is private to you. You can delete an archived garden at any time, and “Delete all data” or deleting your account removes your whole archive.

Sharing a garden

If you choose to share a garden, you get a 6-character invite code that works for 24 hours. Anyone you give it to who is logged in can join that one garden, and they can then see and edit it: its beds, plants, notes and calendar, along with the custom plants it uses. They also see the first names of the people who have access. Nothing else in your account is shared. The garden is kept in its own record in Google Cloud Firestore, readable only by you and the people you invited.

Only the person who created a shared garden can delete it. When they do, the garden, its list of people and any unused invite code are permanently deleted straight away, for everyone, and we keep no copy, record or log of it. Anyone can leave a shared garden at any time, and the creator can remove people. If you delete your account, the shared gardens you created are deleted too, and you are removed from any that were shared with you.

Emails we send

We send an email only when you ask for one or when it's part of signing up: a link to confirm your address when you create an account, and a password-reset link when you use “Forgot your password?”. These are sent to your login address. We don't send marketing email. The optional communication email on the Account page isn't used for anything yet; if we add reminders in the future we'll ask you first.

Services we use

• Google Firebase (Authentication and Firestore) for accounts and cloud sync. Its code is loaded from Google's servers, and your browser keeps a login session in its own storage. See Google's privacy policy.
• Google Fonts for the site's typefaces. Your browser fetches them from Google, which means Google receives your IP address.
• Hostinger hosts the site. Like any web host, it keeps standard server logs (such as IP address and pages requested) for security and operation.

We don't use advertising, analytics or social-media trackers, and we don't sell personal information.

Your choices

• Delete your gardens: on the Account page, “Delete all data” erases everything saved in this browser and, if you're logged in, the copy saved to your account.
• Delete your account: log in, open the Account page and choose “Delete my account”. After you confirm it's you, your login and everything saved to your account are permanently deleted, and this browser is cleared. If that doesn't work for any reason, email admin@hannahsplants.com from the address you signed up with and we'll do it for you.
• Ask a question or request a copy of your data: the same address.

Children

Hannah's Plants is a general gardening tool and isn't directed at children under 13. We don't knowingly collect information from them.

Changes

If this policy changes, we'll update the date at the top of this page.

Contact

Questions about this policy or your data: admin@hannahsplants.com.