Privacy Policy — Deno’s Garden

Effective 12 October 2026

This policy explains what Amir Abed ("we", "us"), who runs Deno’s Gardenat denosgarden.com, collects about you, how it is used and shared, and the choices you have. It is part of our Terms of Service.

What we collect

Account details. Your email address, and your name and profile picture if you sign in with a provider such as Google. Clerk holds these for us.
Profile. The display name and ZIP code you choose to save. The ZIP code is used to look up local frost dates.
Usage of limited features. How many free identifications you have used, whether you have had a free trial, and when your account was created and last changed.
Payments. Your plan, billing dates and payment status, and for a lifetime plan the Stripe payment reference, amount and date. Card details go straight to Stripe; we never see or store your full card number.
Photographs. Photographs you upload for identification, and what was identified.
My Garden. The plants you add to My Garden and what you record about them: planting dates, what each was started from, where it grows, how many, its status, your notes, and its growth log. Only you can see them.
Technical data. Your IP address, browser and device type, and the pages you request, recorded by our host Cloudflare to deliver and protect the site.
Your browser. The site stores your theme and unit choices, and the name it greets you by, in your own browser. Clerk sets cookies to keep you signed in. Google sets advertising cookies, as described under Advertising. We do not use third-party analytics.

Location

We may collect and use location information: the ZIP code you save, the approximate location implied by your IP address, and location data that photographs can carry, such as GPS coordinates stored by a phone camera. We may use location from photographs to improve identification and to understand where plants are grown.

Today the identification page removes location data from photographs in your browser before they are uploaded, so that location never reaches us or Pl@ntNet. If we start keeping it, we will update this policy first. To be certain, turn off location tagging in your camera before taking photographs you upload.

Advertising

We show ads served by Google AdSense. Visitors who are not signed in see the most ads, signed-in accounts on the free plan see fewer, and accounts with the paid plan see none: for them the advertising code is never loaded.

Google and its partners, as third-party vendors, use cookies and similar technology to serve ads based on your visits to this and other websites, and to measure them. Google's use of advertising cookies lets it and its partners serve ads to you based on those visits. You can turn off personalized advertising in Google's Ads Settings, opt out of some other vendors at aboutads.info, and read how Google uses information from sites that use its services. Where the law requires it, such as in the European Economic Area, the United Kingdom and some US states, a consent or opt-out message from Google appears before personalized ads are shown.

We do not give advertisers your name, email address, ZIP code or photographs. What Google collects through its cookies is governed by Google's privacy policy.

How we use it

to run your account, the paid plan, My Garden and the free identification limit;
to identify plants from your photographs and to fill in frost dates;
to email you about your account, payments and changes to these policies;
to email you about our other websites and services;
to share your email address with partners for their own marketing, as described below;
to keep the site secure, prevent abuse, and fix problems;
to meet legal obligations and enforce our terms.

Who we share it with

Services that work on our behalf, each receiving only what its job needs:

Clerk — sign-in, account details and subscriptions.
Stripe — payment processing: subscriptions through Clerk, and the lifetime plan directly. Stripe receives your email address with a lifetime purchase.
Cloudflare — hosting, the account database, and pictures.
Google AdSense — advertising for readers without the paid plan, as described under Advertising.
Pl@ntNet (France) — receives the photographs you submit for identification, under its own terms.

Partners. We may share your email address with other companies so they can send you their own offers, for example about gardening, plants and seeds. Once shared, their use of it is governed by their privacy policies. We do not share the email address of anyone we know to be under 16. You can opt out at any time, as below.

We may also disclose information when the law requires it, to protect people's safety or our rights, or to whoever takes over the site if it is transferred. We do not sell your photographs, ZIP code, garden records or payment details.

Your choices

Promotional email: use the unsubscribe link in any such email, or email us.
Partner sharing: email [email protected] with the subject "Do not share my email". We stop sharing it from then on; we cannot recall an address a partner already has.
Profile: change or clear your display name and ZIP code on your account page.
My Garden: edit or remove any plant or growth log entry on the home page while signed in. You can still see and remove them after a paid plan ends.
Delete everything: "Delete account" on your account page removes your sign-in, profile and My Garden at once.

California residents

You may ask us what personal information we have collected about you and shared, ask us to delete or correct it, and opt out of our sharing it with partners for marketing. Under California Civil Code §1798.83 you may also ask, once a year, which categories of personal information we shared with third parties for their direct marketing in the previous year, and with whom. Personalized ads may count as "sharing" personal information under California law; you can opt out through the message Google shows, through Google's Ads Settings, or by emailing us. Email us to make any of these requests. We will not treat you differently for making one. We do not respond to browser "Do Not Track" signals; we do not track you across other websites.

How long we keep it

We keep your account information until you delete your account. Deleting it removes your profile and My Garden records from our database and your sign-in from Clerk straight away, including any lifetime plan. One thing is kept after deletion: a one-way hash of your email address (a fingerprint that cannot be turned back into the address, only matched against an address that is already known) with the number of free identifications used and whether a free trial was taken. It exists so that deleting an account and signing up again does not renew the free offer. Payment records are kept by Clerk and Stripe for as long as tax and financial law requires. Server logs are kept by Cloudflare for its usual short periods. We do not keep your photographs after identification; Pl@ntNet's handling of them is set out in its terms.

Children

The site is not for children under 13, and we do not knowingly collect their information. If you believe a child under 13 has given us information, email us and we will delete it.

Security and where data is held

Data is sent over encrypted connections and held by the services above, which may store it in the United States, the European Union and elsewhere. No system is perfectly secure, and we cannot promise that yours will never be exposed.

Changes

We will update the date at the top when this policy changes and, for a significant change, email account holders before it takes effect.

Contact

Questions or requests: [email protected].