Your records stay yours
Last updated: October 2026
The short version
- We never sell or rent your data. Not to advertisers, not to data brokers, not to anyone.
- We don't sell your personal information, and we don't share it for cross-context behavioral advertising or targeted advertising, as those terms are used in California, Colorado and other US state privacy laws.
- Your homestead records are used to run Croftura for you and your household. We'll also look at technical data and, when we have to, specific records in order to fix a bug, investigate abuse, or keep the service secure. We don't use your records for advertising, and we don't build profiles of you. Our analytics run on our own servers and never go to an outside analytics or advertising company.
- You can export your records yourself, any time, from inside the app.
Who we are
Croftura is run by South Platte Systems LLC, a Colorado limited liability company. We decide how your personal information is used (in EU and UK terms, we're the "controller"). The easiest way to reach us about anything on this page is hello@croftura.com.
What we collect and why
| What | Why | Legal basis (EU/UK) |
|---|---|---|
| Your name, email address and sign-in records | Create your account and keep it secure | Needed to provide the service you asked for |
| The gardens, animals, chores, supplies, notes and photos you and your household add | That's the service | Needed to provide the service you asked for |
| The location you set for your homestead | Weather and your growing zone | Needed to provide the service you asked for |
| Diagnostic data kept in Azure Monitor: request paths, errors and log lines from the app, plus IP address, browser details, and browser performance and error data. These can include your account ID and your household's ID. | Keep the service secure, stop abuse, fix problems | Our legitimate interest in running a secure service |
| App analytics: the type of page you're on, a few milestones, whether your homestead is solo or a household, and your browser, device, approximate location, screen size and language | Understand what's working so we can improve Croftura | Our legitimate interest in improving the service |
| Visits to croftura.com: pages viewed, the site that sent you, browser and device type, and approximate location | See how many people visit and which pages are useful | Our legitimate interest in understanding and improving our website |
All of our analytics run on our own servers (see below). They never include the content of your records, and they're never sent to an outside analytics or advertising company.
Analytics and cookies
On both our public website and the app, we use Umami, an open-source analytics tool that we run ourselves on our own servers in the United States (Microsoft Azure, East US 2). There are no third-party analytics on either. Analytics data isn't sent to Google, to the company that makes Umami, or to anyone else.
Umami doesn't use cookies, doesn't store anything on your device, and doesn't track you across other websites. Your approximate location (country, region and city) is estimated from your IP address with a lookup on our own servers.
On our public website (croftura.com), for each page view we record the page you viewed, the website that sent you (just the site, not the page), your browser and device type, your approximate location, and the time of the visit. We don't collect your screen size or language settings on the website.
In the app (app.croftura.com). The app uses the same self-hosted Umami. It records the type of page you're on (for example "a garden page", never which garden or animal); a few milestones (signing up, creating or joining a homestead, and your first garden, first animal and first completed task); whether your homestead is solo or a household; the website that sent you when you first arrive; and your browser and device, your approximate location, and your screen size and language setting. It never includes your name, email address, account or household ID, or the content of your records.
You can turn off analytics in the app's Settings. That choice is remembered in your browser's local storage. Apart from that, the app only stores what's needed to sign you in and keep it secure.
To count unique visitors without identifying you, Umami combines your IP address and browser details into a one-way hash using a secret value that changes every month, so visits can't be linked from one month to the next. Umami doesn't store your IP address.
If your browser sends a Global Privacy Control or Do Not Tracksignal, nothing is sent to our analytics at all. You can also object at any time by emailing us.
If this ever changes, for example if we start using advertising tools, we'll update this page and tell you before it takes effect.
Who else handles your information
We use a small number of outside services. Each one gets only what it needs to do its job.
- Microsoft hosts Croftura on Azure (the app, database, photo storage and monitoring) and handles sign-in and sign-in emails. Microsoft processes your data on our behalf under its data protection agreement. Like any cloud provider, it also uses limited operational data to run and secure its own platform. It doesn't get to use your homestead records for advertising.
- The US National Weather Service (weather.gov) receives your homestead's location to return a forecast. It doesn't receive your name, email or records.
- phzmapi.org receives a ZIP code to look up your plant hardiness zone. Nothing else is sent.
- Your browser's push service (run by Google, Mozilla or Apple, depending on your browser) delivers reminders if you turn them on. It receives an encrypted message, not your records.
We don't share your records with anyone else unless the law requires it.
Where your information is stored
Croftura runs in Microsoft Azure's East US 2 region, and sign-in data is held in a US-based Microsoft tenant, so your information is stored in the United States. If you're outside the US, this means it's transferred to the US. Microsoft is certified under theEU-US Data Privacy Framework and its UK Extension, and our agreement with it includes the European Commission's Standard Contractual Clauses. Email us if you'd like a copy of these safeguards.
How long we keep things
| Your records and photos | Until you delete them, or close your account |
| Account and sign-in details | While your account is open |
| After you close your account | Deleted within 30 days. Copies in database backups are gone within a further 7 days, and deleted photos within a further 30 days. |
| Diagnostic data (Azure Monitor) | 90 days |
| Analytics for the website and the app (Umami) | 12 months, then deleted. We may keep overall totals, like monthly visitor counts, that can't be linked to anyone. |
| Emails you send us | As long as needed to help you, and no more than 24 months |
Your household
People you invite to your household can see and edit your household's records. The person who created the household decides who's invited and can remove members.
Your choices and rights
Everyone can export their records from inside the app, edit or delete individual records, and ask us to close their account and delete their data.
Depending on where you live, including California, Colorado and other US states, the EU and the UK, you may also have the right to see the personal information we hold about you, correct it, delete it, get a copy in a portable format, object to or restrict how we use it, and withdraw consent at any time. We won't charge you or treat you differently for asking.
Email hello@croftura.com. We'll reply within one month, and within 45 days at the latest. If we turn down your request, you can appeal by replying to our decision, and we'll review it and answer within 45 days.
Complaints. Please contact us first so we can try to put it right. You can also complain to a regulator: in the EU, your local data protection authority (listed atedpb.europa.eu); in the UK, the Information Commissioner's Office (ico.org.uk); in Colorado, the Attorney General.
Security
We use reasonable safeguards to protect your information, including encryption in transit and at rest. No service can promise perfect security. If a breach affects your personal information, we'll tell you, and any regulator we're required to tell, within the time the law sets.
Age
Croftura accounts are for people 18 or older. We don't knowingly collect personal information from anyone younger. If we learn that we have, we'll delete it.
Where Croftura is offered
Croftura is offered from the United States and is meant for people in the United States. If you use it from somewhere else, this page still explains how we handle your information.
Changes
We'll post changes here and update the date at the top. If a change matters, we'll email you or tell you in the app before it takes effect.
Questions
Write to hello@croftura.com. South Platte Systems LLC is the company behind Croftura.