Your privacy
A plain guide to what we keep and why.
You can browse Southern Horticulture without signing in. We use one short session cookie to follow a visit across pages. Sending a form does not connect that visit to your name. Signing in is your choice to allow account-linked activity. We do not sell personal information or use advertising or social-media trackers.
| What | Tool | Why | How long |
|---|---|---|---|
| One visit across pages | Our first-party session cookie | Count page use during a visit without a cross-visit identifier | Cookie: 30 minutes of inactivity |
| Pages, searches, plant and list activity | Supabase (our database) | See which parts of the site help visitors; campaign labels stay in sessionStorage for this tab only | Visit records: 90 days; campaign labels: at most 30 minutes; daily totals kept |
| Hosting requests | Vercel hosting logs | Run and protect the website; requests can include IP addresses and browser details | Set by Vercel, outside our database deletion jobs |
| Page and speed counts | Vercel Analytics / Speed Insights | Cookie-free page counts and speed measurements | Set by Vercel, outside our database deletion jobs |
| Our copy of request logs | Supabase in our analytics app (ACE-Atlas) | Check security and site performance | Raw: 7 days; hourly: 90 days; daily totals kept |
| Contact forms and other inquiries | Supabase, emailed via Resend, posted to staff Slack, and our CRM (ACE-Atlas) | Keep customer conversations and reply to your request, including when measurement is off; IP and browser details help screen abuse | Database and CRM records: 24 months; flagged spam: 30 days. Email and Slack copies: contact us for deletion |
| Growbot chats, if and when Growbot is live | Supabase; OpenAI or Anthropic, depending on the active provider | Answer gardening questions | Our chat records: 7 days; AI providers have their own policies |
| Spam and rate-limit counters | Upstash | Limit abuse and keep forms available | Minutes to an hour |
| Map on our contact page | Google Maps embed | Show the nursery and directions; loading the map sends a request to Google | Set by Google, outside our database deletion jobs |
| Signed-in accounts | Supabase Auth | Provide your account; signing in allows us to connect your visit to your customer account | Until the account is deleted |
| Garden Pass | Supabase | Keep the plant list and pass you request; only signed-in customers can have a visit linked to a pass | 30 days after the pass expires |
| Site errors, when enabled | Sentry | Find and fix website errors | Set by Sentry, outside our database deletion jobs |
Your choice
We honour Do Not Track and Global Privacy Control. These signals and the control below turn off our visit measurement, campaign storage, Vercel Analytics and Speed Insights. Forms, lists and requested features still work. Security and hosting logs can still record requests. Your opt-out preference is saved on this browser without an identifier.
Checking this browser's setting…
For a question or to ask us to delete your information, including staff conversation copies, call 904-471-0440. Tell us which inquiry or account you mean so we can find it.
Effective date: October 29, 2026