Privacy
Last updated 28 August 2026.
The Bloomsteader app sends nothing anywhere. It makes no network requests at all — no accounts, no sync, no analytics, no cookies. Your garden plans stay in your own browser, on your own device. We never see them.
This page explains the small amount of personal information we do hold, which comes from buying, from asking for your licence key, and from the newsletter. It is written in plain language on purpose.
Bloomsteader is operated by Bloomsteader LLC (“Bloomsteader”, “we”, “us”). Write to us any time at hello@bloomsteader.com or at 237 Taylor Street, Second Floor, Port Townsend, WA 98368.
The app holds your data, and only your device holds it
The Bloomsteader app — whether you open it at bloomsteader.com/app/ or run the
downloaded file from your own disk — stores everything locally in your browser,
using localStorage and IndexedDB.
That includes your beds, plantings, calendar, notes, harvest records, the photos you attach to journal entries, and your licence key.
- The app contains no code that sends data anywhere. There is no
fetch, noXMLHttpRequest, no tracking beacon and no cookie in it. - Your licence key is checked on your device, against a public key built into the app. Nothing is contacted to verify it.
- Photos you attach to journal entries are held in your browser’s IndexedDB, kept separate from your garden records so a large photo library cannot crowd them out. They never leave your device.
- We cannot read your garden data, recover it, or back it up. Use the app’s own export if you want a copy.
- Clearing your browser’s site data for bloomsteader.com deletes it. That is the only way it goes away, and it is permanent.
What we actually collect
| When | What is held | Where it lives |
|---|---|---|
| You buy | Your email, order number, what you bought, and the amount. We never see or hold your card details. | Gumroad, who sell the product to you as merchant of record. |
| You collect a licence key at /key | Your email address, your Gumroad order number, your licence key, which tier it is, the purchase date, and a count of how many times the key has been shown. | Cloudflare Workers KV, on our Cloudflare account. |
| You email hello@ | Whatever you write, and your email address. | Forwarded by Cloudflare Email Routing into a Microsoft Outlook mailbox. |
| You join the newsletter | Your email address, the date you confirmed, and whether you opened or clicked. | MailerLite. |
| You buy merchandise | Your name, shipping address and payment details, taken by the merch store, not by us. | Printful, who run the store at bloomsteader.printful.me and ship the order. |
| You visit the website | Standard web request data, plus privacy-first page counts. | Cloudflare. See below. |
Website visits
The site runs on Cloudflare Pages. Cloudflare handles every request and keeps short-term logs, including IP addresses, for security and abuse prevention. That is normal hosting, and we do not build profiles from it.
We use Cloudflare Web Analytics for page counts. It sets no cookies, uses no fingerprinting, and does not follow you across other websites. We see totals, not people.
We run no advertising pixels. There is no Google Analytics, no Meta pixel and no third-party ad tracking on this site.
Links that leave the site
Buying, merch and some plant references take you to other companies’ websites — Gumroad, Printful, and university extension services. Once you are there, their privacy policies apply, not ours.
Some plant and supply links in the app are affiliate links, which are labelled as such in the app. Following one may let that retailer know you arrived from us. We are not told who you are.
Why we hold it, and for how long
- Your key record exists so you can get your key back when you need it. We keep it for as long as you own the product. Ask and we will delete it — but understand that once it is gone we can no longer show you your key.
- Your email to hello@ is kept so we can answer you and so we have a record if a question comes back later.
- Newsletter is kept until you unsubscribe. Every email has an unsubscribe link, and it works immediately.
We do not sell personal information. We do not share it for advertising. We do not trade it. The only companies that touch it are the ones named in the table above, and each one is there to do a specific job.
Your rights
Wherever you live, you can ask us to:
- tell you what we hold about you
- correct it
- delete it
- send you a copy
- stop emailing you
Email hello@bloomsteader.com from the address you bought with, and we will do it. We aim to answer within a few days and will not charge you or make you fill in a form.
If you are in the UK or the EU, our lawful bases are performance of a contract (delivering what you bought), consent (the newsletter) and legitimate interests (keeping the site up and answering your mail). You have the right to complain to your local data protection authority. If you are in California, we do not sell or share your personal information as those terms are defined by the CCPA, and we will not treat you differently for exercising any right on this page.
Children
Bloomsteader is a gardening tool for adults. It is not directed at children, and we do not knowingly collect personal information from anyone under 16. If you believe a child has sent us information, write to us and we will delete it.
Where your data is handled
We are based in the United States, and our suppliers process data in the United States and elsewhere. If you are writing to us from outside the US, your information will be handled in the US.
Security, honestly stated
Traffic to this site is encrypted. Key records sit in Cloudflare’s storage behind account credentials. Your key lookup needs both your email and your order number, and each key stops being served after a number of retrievals.
No system is perfect. If something ever goes wrong with data we hold, we will tell the people affected rather than keep it quiet.
Changes
If this policy changes in a way that matters, we will change the date at the top and say what changed. Material changes will be announced to newsletter subscribers.
Questions about any of this: hello@bloomsteader.com.