last updated · july 17, 2026

Privacy Policy

This Privacy Policy explains how Rose Seeds ("Rose Seeds", "we", "us", or "our") collects, uses, and shares information when you visit roseseeds.org or use any account-based features of the site (collectively, the "Service"). This page is maintained by the site owner and is not a certification or independent audit.

Who we are

Rose Seeds is a small, independently-run website. You can reach the site owner at hello@roseseeds.org.

Information we collect

Account information — email address and password (stored hashed by our authentication provider).
Profile information you choose — a chosen codename, an optional icon-and-number safety key, and any notes, letters, journal entries, group posts, or messages you write inside the Service.
Security data — timestamps of sign-in attempts, failed-login counts, and lockout status, used only to protect your account from brute-force attacks.
Reports you submit — the content of any report you file about another user.
Analytics — we use Google Analytics (GA4) to count visitors and understand which pages are used. Google Analytics may set cookies and collect information such as your IP address (truncated), device type, browser, referring site, and pages viewed. We do not run any other third-party trackers, advertising pixels, session recorders, or behavioral profiling.

What we do NOT collect

We do not sell, rent, or trade your information. We do not run advertising. We do not use your private messages, journal entries, or letters for training AI models or for marketing.

How we use information

To operate the Service (log you in, deliver your messages, save your entries).
To keep the Service safe (rate-limit sign-ins, block reserved names, review reports).
To moderate content. Site administrators may access and review content — including group posts, circle threads, and private messages — in order to enforce our Terms, investigate reports, prevent illegal activity, and comply with the law.
To understand aggregate site usage via Google Analytics.
To contact you about your account (password reset, email confirmation, security notices).

Who we share information with

We only share information with the service providers required to run the site: our hosting and database provider, our authentication and email-delivery provider, and Google Analytics. We may disclose information if required by law, valid legal process, or to protect the rights, property, or safety of Rose Seeds, our users, or the public.

Cookies

We use cookies that are strictly necessary to keep you signed in and to remember your preferences. Google Analytics sets its own cookies for aggregate measurement. You can block cookies in your browser at any time; some features (including sign-in) will not work without them.

Your choices and rights

You can delete your account and its associated data at any time from Settings inside the site. California residents have specific rights under the California Consumer Privacy Act (CCPA/CPRA), including the right to know, delete, and opt out of the "sale" or "sharing" of personal information. We do not sell or share personal information as those terms are defined by the CCPA. To exercise any of these rights, email hello@roseseeds.org.

Data retention

We keep your account information for as long as your account is active. Login-attempt and security logs are retained for a limited period for abuse prevention. Deleted accounts are removed from active systems promptly; backups may persist for a short period before being overwritten.

Children

The Service is intended for users age 16 and older. We do not knowingly collect personal information from anyone under 16. If you believe a child under 16 has created an account, please email us and we will delete it.

International users

The Service is operated from the United States. If you access it from outside the U.S., you consent to your information being transferred to and processed in the United States.

Security

We use reasonable technical and organizational measures — encryption in transit, hashed passwords, row-level database security, rate-limiting, and lockouts — to protect your information. No online service can be 100% secure, and we cannot guarantee absolute security.

Changes

We may update this Privacy Policy from time to time. Material changes will be posted here with a new "last updated" date. Continued use of the Service after changes take effect constitutes acceptance.

Contact

Questions about this policy? hello@roseseeds.org.