On The Grow, LLC (“we”, “us” or “our”) uses cookies in Sprouting Tracker (“the Service”). This policy says which ones, what they do, and what control you have over them.
1. The short version
Every cookie the Service sets either keeps you signed in or remembers a display choice you made yourself. We set no analytics cookies, no advertising cookies and no tracking cookies of any kind. That is why you have never seen a cookie banner here: a banner exists to ask consent for optional cookies, and we do not have any to ask about.
2. What a cookie is
A cookie is a small text file your browser stores on your device when you visit a site. It is sent back to that site on each later request, which is how a site can tell that two requests came from the same person.
3. What we set
| Cookie | Set by | What it does |
|---|---|---|
Session cookies, named better-auth.session_token and better-auth.session_data (with a __Secure- prefix on the live site) | Us | Hold your signed-in session as you move around the app. Without them you would be signed out on every page load. The second is a short-lived copy of who you are, so most pages can be drawn without a database lookup; it lasts five minutes at a time. A session lasts seven days and is renewed about once a day while you use the app. Both cookies are cleared when you sign out. |
Admin unlock, named st_admin_unlock | Us | Set only on a browser signed in as our own operator account, after a second password, to open the internal support console. It lasts eight hours and is sent only to the console address. It is never set for a grower account. |
Display preferences, named display | Us | Holds your theme, text size, colour palette and card style, so the first screen we send you is already painted the way you chose instead of flashing the wrong colours first. It stores those four settings and nothing else, cannot be read by scripts, is not sent to other sites, and lasts a year. Your account holds the same four values, so this is a copy for speed rather than the only record. Signing out deletes it. |
| Stripe cookies | Stripe, our payment processor | Set when you start or manage a subscription, and used by Stripe for fraud prevention. They are not set if you never open the billing pages. |
4. What we do not set
- No analytics. There is no analytics package in the Service at all. We do not measure page views, sessions, funnels or feature usage in your browser.
- No advertising or social pixels. We have no advertising partners and no social media integrations, so nothing of that kind is loaded. The one video on our home page waits until you press play; see Section 7.
- No cross-site tracking. Nothing we set can follow you to another website.
- No tracking dressed up as a preference. The one preference cookie we set is listed above, it holds your theme, text size, colour palette and card style, and that is all it holds. Your timezone, units and rinse times are saved to your account on our servers rather than in your browser, which is why they follow you to a new device. The four display settings are saved to your account too; the cookie is a copy we can read before the page is drawn.
5. Other browser storage
Our own pages use no local storage and no session storage. If you install it to your home screen, it registers a service worker, which is the mechanism that lets a rinse reminder reach you when the app is closed. Ours does one thing: it receives a push notification and opens the right screen when you tap it. It caches nothing.
If you turn on reminders, your browser also stores a push subscription. That is held by the browser rather than by us, and turning reminders off in Settings removes it at both ends. Section 1.2 of our Privacy Policy explains what we receive.
6. Your choices
Because we set nothing optional, there is nothing here to opt out of. You can still block or delete cookies in your browser settings, and you can clear this site’s data at any time. Blocking our session cookies will sign you out and stop the Service working, because there would be no way for it to tell one request from another.
If we ever add anything optional, we will ask first, it will be off until you say yes, and this page will be updated before it loads.
7. Third parties
On the sign-up, sign-in, password reset and contact pages, a Cloudflare Turnstile check loads from Cloudflare and may set its own cookie. When you pay, you go to Stripe’s own pages, which set their own. Both are governed by their own policies. Our home page shows a video from our YouTube channel. Nothing from YouTube loads until you press Play Video. The player then comes from youtube-nocookie.com, and YouTube may store data in your browser under its own policy. The full list of every provider we use, what each receives and why, is in Section 3.2 of our Privacy Policy.
8. Updates
We may update this Cookie Policy. The “Last updated” date at the top reflects the latest version.
9. Contact us
If you have questions about any of this, write to us: