Privacy

Despensa is a diary for what you buy at farmers markets. This page describes exactly what it stores, who can see it, and what we will and won’t ever do with it. It is written to be read rather than to cover us.

What we collect

Only what the product needs to work:

• Your email address and password. Passwords are hashed by our authentication provider and are never visible to us.
• Your profile. A username, an optional display name, an optional bio.
• What you log. The market, the date, what you bought, which stall you bought it from, quantities, your rating of the item, and any notes or title you add.
• Photos you upload. Resized in your browser before they are sent.
• Comments you write.
• Basic technical logs kept briefly by our hosting and database providers, which include IP addresses. We do not use them to build a profile of you.

We do not use tracking cookies, advertising pixels, or third-party trackers. Our traffic analytics are cookieless and do not identify individuals.

What other people can see

A haul is public by default: your username, the market, what you bought, which stalls, your item ratings, any photos, and any title or notes on it. You can set a haul to followers-only or private when you log it. Your comments are visible to anyone who can see the thing you commented on.

Aggregate information about crops

We do analyse what is logged across everyone, but only at the level of crops and seasons — for example, that heirloom tomatoes were logged heavily across Los Angeles in August. This is what makes the seasonal features work, and we may in future publish or license this kind of aggregate, de-identified information.

We will never sell or license information about how an individual farm or stall is performing, and we will never sell information that identifies you. Data about a season is a fact about the weather. Data about one small business’s traffic is competitive intelligence, and selling it would betray the people this product depends on.

Who we share it with

Only the services required to run Despensa: Supabase (database, accounts, photo storage), Vercel (hosting and cookieless analytics), and Resend (sending you emails such as sign-in links). Each processes data on our behalf. All are based in the United States. We do not sell your personal information to anyone, and we never have.

What you can ask for

• A copy of everything we hold about you.
• Correction of anything that’s wrong.
• Deletion of your account and everything in it.

Email hello@despensa.market and we will action it within 30 days. If you delete your account, your hauls, photos, comments and profile go with it. Farm and market pages themselves remain, because they are shared records rather than yours — but nothing on them will identify you.

Farms and stalls

Pages for farms and market stalls are created by shoppers recording what they bought. They contain no private information about a business. If you run a stall and want your page hidden from browsing and search, email us and we will do it without argument. We will not ask you to pay for that, or for anything else about your page.

Children

Despensa is not intended for anyone under 13, and we do not knowingly collect information from them.

Changes

If this policy changes in a way that affects what we do with information already collected, we will tell account holders by email before it takes effect rather than quietly updating this page.