Privacy Policy

Browsing the site

Dahlia Source doesn't use analytics, advertising or tracking tools, and the site itself doesn't set cookies. Like every website, our hosting provider handles the technical details of each visit (such as your IP address and browser type) to deliver pages and protect the site from abuse. Cloudflare, which hosts the site, may set a strictly necessary security cookie to filter out malicious traffic.

The site's fonts come from Google Fonts, so your browser contacts Google to download them, which shares your IP address and browser details with Google.

Stock alerts

When you sign up for alerts, we keep:

• your email address;
• what you asked us to watch (varieties and nurseries);
• your time zone, read from your browser, so alert emails show local times;
• when you signed up and when you confirmed, as a record of your consent;
• for 90 days, a log of the emails we sent you: each subject line, the stock changes an alert covered, and whether it was delivered, but not the emails themselves.

We use this only to send the alerts you asked for, plus the emails that confirm your signup or send you your settings link. We never send marketing or newsletters to your alert address, and we never sell or rent it. Our emails contain no tracking pixels or tracked links.

To stop people from flooding the signup form, we briefly count requests from each IP address. We store only a scrambled (keyed hash) version of the address, never the address itself, and delete it within two days.

Unsubscribing and deleting your data

• Every alert email has an unsubscribe link, and most email apps show a one-click unsubscribe button. Either stops our emails right away. We keep your watch list for 30 days in case you change your mind, then delete it. We keep your address marked as unsubscribed so we don't email it again, until you delete it.
• Your alert settings page, linked from every alert, has a "Delete my data" button. It removes your email address, your alerts and their history immediately.
• If you sign up but never confirm, we delete the signup after 30 days.

Deleted data can remain in our providers' backups for a short time until those backups expire.

When you email us

Our contact form opens your own email app; the site itself doesn't send or store your message. When you email us, we use what you send to reply and keep the conversation for as long as it's useful to answer you and keep a record.

Who helps us run Dahlia Source

These providers process data on our behalf, only to run the parts of the service described:

• Cloudflare hosts the website.
• Supabase hosts our database and the service behind stock alerts.
• Emailit delivers our emails.
• Google Fonts serves the site's fonts.

They may store and process data in the United States and other countries. We don't share personal information with anyone else, except where the law requires it.

Nursery information

To tell gardeners what's in stock, we read the product listings nurseries publish in their public online shops: product names, prices and availability. This is business information, not personal data. Our checks identify themselves as Dahlia Source. If you run a nursery and want us to correct something or stop checking your shop, email hello@dahliasource.com.

Your rights

You can ask us for a copy of the information we hold about you, ask us to correct or delete it, or withdraw your consent to alerts at any time by unsubscribing. Email hello@dahliasource.com and we'll respond within 30 days. Depending on where you live, you may also have the right to complain to your local data protection authority.

We don't sell personal information, and we don't share it for advertising. We send alerts because you asked for them (your consent), and we use limited data to keep the service secure (our legitimate interest in preventing abuse).

Children

Dahlia Source isn't directed at children under 13, and we don't knowingly collect their information. If you think a child has signed up, email us and we'll delete it.

Changes to this policy

If we change this policy, we'll update the date at the top. If a change affects how we use alert subscribers' information, we'll email them before it takes effect. See also our terms of use.

Contact

Questions about privacy: hello@dahliasource.com.