Legal
Privacy Policy
Last updated: 2026
1. Information We Collect
Account information. When you sign in with Google OAuth, we receive your name, email address, and profile picture from Google. If you register with email and password, we store your email and a hashed version of your password (never the plaintext).
Registry data. Registries you create, items you add, and reservation details left by gift-givers (email address only).
Newsletter subscriptions. Email address you provide when subscribing. We do not collect names or phone numbers for the newsletter.
Affiliate click data. When you click an affiliate link, we log: which item was clicked, the referring page, the affiliate network, and a timestamp. We do not log your IP address or user agent beyond what server logs capture automatically.
2. How We Use Your Information
- To authenticate your account and maintain your session
- To show you your registries and saved items
- To send the Weekly Outdoor Digest (newsletter subscribers only)
- To track affiliate commissions earned on clicks
- To improve the site based on aggregate usage patterns
We do not sell your personal information. We do not use your data for advertising.
3. Cookies
Wild Sprout uses only essential cookies — specifically the session cookie set by NextAuth.js to keep you signed in. We do not use:
- Advertising or tracking cookies
- Analytics cookies (we use server-side logging only)
- Third-party marketing cookies
Because we use only essential cookies, no cookie consent banner is required under GDPR or CCPA.
4. Third-Party Services
Google OAuth. Sign-in is handled by Google. Their Privacy Policy applies to the OAuth flow.
Resend. Newsletter emails are delivered via Resend. Your email address is stored in our database and transmitted to Resend for delivery only.
Neon (PostgreSQL). Our database provider. Data is stored in the US.
Vercel. Our hosting provider. Standard server access logs are retained per Vercel's data retention policy.
5. Data Retention
Account data is retained as long as your account is active. You can request deletion at any time by emailing hello@wildsprout.life. Newsletter subscriptions are retained until you unsubscribe.
6. Your Rights
Depending on your jurisdiction, you may have rights to access, correct, or delete your personal data. To exercise these rights, email hello@wildsprout.life.
7. Contact
Questions about this policy? Email hello@wildsprout.life.