Privacy
What we keep, and where
Written in plain English by the people who built the site, so it can be precise about what the site actually does. Last updated 8 August 2026.
I
The short version
We set no cookies of our own and we sell nothing about you to anybody. Browsing, filtering and filling a cart all happen inside your own browser. The one time your details reach our server is when you type an email address into a form and press the button: that is what the Garden is, and it is described below, honestly.
II
What stays on your device
The site keeps a few things in your browser's local storage so it can remember you between visits. These are not cookies, and they are not sent to us:
- your cart, and the sizes you picked
- your Garden hearts (the wishlist), if you use it without signing up
- the name and email you gave us, so the site can greet you and pre-fill forms
- that you confirmed you are 21 or older
- your answers to the Ritual builder's feedback prompt
Clearing site data for this domain in your browser wipes all of it. Nothing breaks; the site simply forgets you.
III
What lands on our server
Your Garden
If you create a Garden or track an item, we store your email address, the name you gave (if any), the items you saved, whether you ticked the consent box, and whether you have unsubscribed. That record exists so we can send the emails you asked for: a welcome note, tracking confirmations, and a weekly recap of your saved items. Every email carries an unsubscribe link, and unsubscribing sticks.
Click counts
When you click through to a maker we record the click: which product, which maker, the price shown, the page and filters you were on, and whether you were on a phone. If you are signed in, the record includes your email. We use this to learn which makers and products our visitors actually want, and to show makers honest referral numbers. It is not sold, shared or used for advertising.
IV
The short list of other companies
| who | what they get | why |
|---|---|---|
| Vercel | ordinary request logs, which include IP addresses | they host the site |
| Neon | the Garden records and click counts described above | they host our database |
| Resend | your email address, if you made a Garden | they deliver the emails |
| a font request from your browser | the typefaces on our pages | |
| Awin | that a click came from us; not who you are | affiliate credit for some makers |
| impact.com | that a click came from us; not who you are | affiliate credit for some makers |
That is the whole list. No advertising network, no tag manager, no session recorder, no chat widget, no data broker.
V
Clicking through to a maker
Every product here belongs to an independent maker, and buying happens on their
site under their privacy policy, not ours. Links usually carry a referral tag
(an Awin or impact.com link, or a code like ref or tr in
the address) so the maker knows the visit came from us and any commission is
credited. The tag does not tell them who you are, because we do not know either.
VI
Your data, and how to get rid of it
Email hello@herballeafmarket.com and ask. You can ask what we hold on you, ask for a copy, or ask us to delete it. We will delete the record without requiring a reason. For most people the honest answer will be: an email address, a list of saved botanicals, and it is gone now.
This site is for adults 21 and over. We do not knowingly collect anything from anyone under 21, and if we learn that we have, we will delete it.
If we change how any of this works, we will change this page and move the date at the top. We will not quietly widen what we collect and leave the old page up.