Privacy Policy

Pasture Path is operated by Crossthread, a business registered in Alberta, Canada ("we"). This page says what information we hold about you, why, who else sees it, and what you can do about it. If anything here is unclear, write to hello@pasturepath.com.

The short version

• We keep what you type in — your account, your farm's records, your orders — so the service can work.
• We do not sell it and we show no advertising. Visits to the site are counted without cookies and without identifying anyone.
• Your farm is private unless you choose to sell through Pasture Path.
• You can download all of your farm's records at any time, and ask us to delete your account.

What we hold

Your account

Your name, email address and, if you give it, your phone number. If you set a password we store a one-way hash of it, never the password itself. If you sign in with Google we store the identifier Google gives us for your account and the name and email address Google passes along.

Your farm's records

Everything you enter about your farm: its name and description, field and paddock boundaries (which are locations), map features, crops, livestock groups, grazing moves, journal entries, harvests, inventory, tasks and anything you write in notes.

Orders

When a shopper places an order we keep what was ordered, the note they wrote, and their name, email address and phone number as they were at the time, so the farm can arrange the pickup.

Technical records

Our servers log the IP address and browser details of requests, and we keep a record of sign-up attempts (email address, IP address, browser) to stop abuse. These are used for security and fault-finding, not for profiling.

On your own device

One cookie keeps you signed in. Your browser also stores a few things locally so the app works the way you left it: your map view and pinned apps, a shopping cart, and any harvests recorded without signal until they have been sent. There are no advertising or analytics cookies.

What other people can see

• Nothing, by default. A farm's records are visible only to the account that owns the farm.
• If you sell through Pasture Path (you list a product with a price), your farm gets a public page showing what you chose to put on it: farm name, town, description and story, the contact details you entered as public, your pickup instructions and the products for sale. A lot label's QR code shows the crop, variety, harvest date, grade and farm name for that lot.
• Your farm's street address is shown to a customer only after you have accepted their order.
• If you place an order, the farm you order from sees your name, email address, phone number and note.

Who helps us run it

We use a small number of companies to operate the service. They process information on our behalf:

• Amazon Web Services — hosting and database, in its Montréal region, and sending email (sign-up confirmation, password reset, order notices).
• Cloudflare — delivering the website to your browser, and counting visits to it (Cloudflare Web Analytics). The counting uses no cookies and does not follow you from site to site. What we see is totals: which pages were opened, which site people arrived from, and which country they were in.
• Mapbox — satellite imagery and place search. Your browser asks Mapbox for map images directly, so Mapbox sees your IP address and the area you are looking at.
• Google — only if you choose "Sign in with Google".

We do not sell personal information, and we do not share it with anyone else unless the law requires us to.

Where it is kept, and for how long

Farm records, accounts and orders are stored in Canada. We keep them for as long as your account is open. When you ask us to delete your account, we delete your records; copies in backups and logs disappear as those are replaced. Orders a shopper placed stay in that farm's sales records, with the name and contact details given at the time, unless the shopper asks us to remove those too.

What you can do

• Get a copy. A farm can download all of its records from Settings at any time.
• Correct it. Edit your account and your farm's records in the app.
• Delete it. Write to hello@pasturepath.com from the email address on the account and we will delete it.
• Ask. You may ask what we hold about you, and complain to your privacy regulator if you think we have got it wrong.

Children

Pasture Path is for adults running or buying from farms. It is not directed at children, and accounts are for people aged 18 or over.

Changes

If we change what we collect or who we share it with, this page will say so and carry a new date. For a change that matters — a new provider, payments, analytics that identify you — we will also tell account holders by email.