Privacy policy

Written to match what this service actually does, not a generic template. This is a genuinely useful starting point, written honestly — it is not a substitute for proper legal review before this service is promoted beyond a small beta.

What we collect

Your email address, the postcode you enter, your chosen mow height, whether you've opted into No Mow May, and — optionally — when your lawn was laid. Nothing else is asked for. We don't use tracking cookies or analytics on this site.

How your email is stored

Your email address is encrypted at rest (AES-256-GCM) using a key that is never stored in the database itself — a database-only breach would not on its own expose email addresses. Alongside the encrypted value, we store a one-way cryptographic hash of your email, used only to detect duplicate signups and to look up your account from the links we send you; that hash cannot be reversed back into your email address.

How your location is stored

We look up your full postcode once, at signup, purely to validate it and find its outward code (e.g. the "N8" part of "N8 7RN"). We only ever store the outward code's approximate centre point — never your postcode's own precise, near-doorstep location. That's already more precision than the weather data we use actually needs.

Who else sees your data

A few third-party services are necessarily involved in running this: Resend (sends the emails, and therefore sees your email address and message content), postcodes.io (a free UK postcode lookup service, sees your postcode at signup only), Open-Meteo (weather data, looked up by approximate location only — never sees anything that identifies you), and our database host, Neon (stores the encrypted data described above). None of these are paid to advertise to you, and we don't sell or share your data with anyone else.

How long we keep it

For as long as your account exists. There's no automatic expiry — you control deletion yourself (see below).

Your rights

Every email we send includes a link to manage your account. From there you can pause alerts (keeps your data, stops emails) or permanently delete your account (removes your email, postcode, and lawn preferences entirely, immediately — this cannot be undone). No login or password is needed; the link itself is your access.

Contact

This service doesn't yet have a dedicated support inbox. For now, the manage link in your emails is the primary way to exercise control over your own data.