Cookie and device storage policy

1. What this policy covers

This document describes how the agronotes.app website uses cookies and other forms of storing information on your device, such as the browser’s local storage. Data the mobile App stores on your phone is described in the App privacy policy.

2. What we do not use

• We do not use advertising or marketing cookies.
• We do not use cross-site tracking cookies.
• We do not use social media pixels or plugins.
• We do not build visitor profiles or link website traffic to an App account.

3. Visit statistics

We measure visits with Umami Cloud. The script does not set cookies and does not store an analytics identifier in browser storage. We do not enable Distinct ID or session replay, so we do not link visits to an App account or to a particular person across devices.

On each page view, the script sends Umami information such as the address of the page visited, the referring page, browser and operating system type, screen size, language and approximate location. Umami creates a technical session identifier: a hash of data such as the IP address, user agent and website ID, with a periodically rotated salt. The Umami dashboard therefore shows not only totals but also the course of individual sessions. This does not by itself allow us to identify you. The script respects the Do Not Track header.

4. Strictly necessary browser storage

Two pages handle links sent by the App: the email confirmation page and the page for setting a new password. To turn the one-time token from the email into a secure session and let you save a new password, the authentication library stores session data in the browser’s local storage.

• This data is stored only after you open a link from an email.
• It is used only to carry out the requested action and is not used for analytics.
• After the new password is saved, the session is closed so that no account stays signed in in the browser.

Access to device storage to this extent is strictly necessary to provide a service you explicitly requested, so it does not require separate consent.

5. Contact form

The form on the contact page is protected by Cloudflare Turnstile. The check tells a message sent by a person apart from an automated submission. For this purpose Cloudflare may store a technical cookie and receive your IP address and browser data. This is not used for advertising, profiling or cross-site tracking. Without the check the form will not accept a message, so the storage is strictly necessary for the service you asked for and does not require separate consent.

6. Why you do not see a consent banner

Consent to store or access information on a device is required when this is not strictly necessary to provide a service requested by the user. Umami analytics does not store information on your device; sessions are distinguished on Umami’s server. Browser storage is technically necessary to handle the link from an email and to protect the contact form. That is why we do not show a consent banner. If we ever introduce Distinct ID, session replay, analytics cookies or any other storage on your device beyond the service you ask for, we will ask for your consent separately and update this document.

7. How to remove stored data yourself

In your browser settings you can clear site data at any time, including local storage and cookies, and block them from being stored. Blocking local storage for agronotes.app will, however, prevent you from setting a new password through the link in an email; you can still change your password directly in the App.

8. Mobile app

The mobile App does not use cookies. It does store data on the device so that it can work without internet: a local copy of the farm, a queue of changes to send, the session token and downloaded map tiles. Details and how to remove them are in the App privacy policy.

9. Contact

Send questions about this document to contact@agronotes.app.