What I keep and why.

The app is not this website

The Herbiculator itself keeps your mixes, your products and your settings on your own device, and uploads them only if you sign in for backup. Either way this page isn't about them — it's only about the promotional site you're reading now. The app has its own privacy policy, and you'll find it in the About section of the app.

If you use the contact form

You send me an email address, a message, and which of the two topics you picked. It goes through Resend, an email service, and lands in my inbox. I use the address to reply to you and for nothing else — no list, no newsletter, nobody else gets it. It stays in my inbox the way any email does; ask me to delete it and I will.

The anti-spam check

The form is gated by Cloudflare Turnstile, which is what stops the endpoint being hammered by bots. It's invisible unless it wants a tap. Like anything that has to tell a person from a script it sees your IP address and some signals from your browser. And when you press send, this site's own endpoint hands your IP to Cloudflare a second time, to check the pass your browser was given rather than take the page's word for it. Either way those are Cloudflare's to hold, not mine, and I never see them.

If you're offline

With no signal, sending hands the message to your device's own email app instead. Nothing reaches this site, or Cloudflare, or me, until you send it yourself from there.

Counting visitors

Cloudflare Web Analytics, which is cookieless and doesn't follow you anywhere. It tells me how many people opened a page, roughly where in the world from, which browser and kind of device they were on, and — if you arrived by following a link — which site sent you. Not who. That's also why there's no consent banner crawling up from the bottom of the screen: there's no consent to collect.

When something on the page breaks

Two things here are loaded from somewhere else: the anti-spam check on the contact form, and the coffee widget, which the support page and the contact page both load. Both can fail without looking like they've failed, and you'd have no way to tell me — the contact form is the thing that's broken. So the page tells me itself: which of the two broke, which page of mine you were on, and a rough note of your device, like "android-120". That last one is deliberately blunt — enough to tell me whether it's an old-phone problem, not enough to tell two people apart. Not your name, not your address, nothing you typed, and nothing at all unless something has actually gone wrong. Either way nobody is notified and nothing is sent anywhere else: those three things are added to a tally held by Cloudflare, the same people who count the page views above. I read the counts once a week, and the device note only if I'm working out what broke. Only the support page reports the widget, not the contact page — one report is enough to tell me it's down everywhere.

If you buy me a coffee

The support page and the contact page load Buy Me a Coffee's widget, which is the only third-party code on this site outside the contact form's anti-spam check. The payment panel is theirs, served from their site, and your card details go to them and never touch this one. Because it's their code running, they see your IP address and can set their own cookies inside that panel — what they do with it is covered by their privacy policy, not this page. On the contact page their script is loaded into the same page as the form, so it is running while you type. It is not handed anything you type, and it has never been caught asking — but a script on a page can read that page, so this is trust placed in them rather than a wall between them and your message. If that isn't a trade you want to make, the support page makes the same ask with no form on it. No other page on this site loads anything of theirs.

Cookies

This site sets none. Not one. Two footnotes, because a flat claim like that deserves them. The payment panel — on the support page and the contact page both — belongs to Buy Me a Coffee, and anything set inside it is theirs, not mine. And if one of those breakages above happens, your browser remembers it for the rest of the tab so the page doesn't report the same fault twice — that's not a cookie and it never leaves your device, but it is a thing being stored, so here it is.

The hosting

Cloudflare Pages serves the site, and like every web host on earth it logs the requests it serves. That's the deal with being on the internet rather than a difference between this site and any other.

What isn't happening

Nothing is sold. There are no advertising trackers, no social pixels, no session recording, no chat widget, and no profile of you anywhere. This is a page about a spray calculator.

If this changes

The updated version appears here with a new date at the top. There's no mailing list to announce it on, which is rather the point.

Who's making these promises

This site and the app are run by Richard Camilleri, ABN 22 687 997 076, Western Australia. That's the whole organisation.