The Gnomestead (“we,” “us,” or “our”) operates weisen.farm — a small farmstand storefront where you can create an account, browse what's in season, and place orders for pickup. This policy explains what information we collect, how we use it, and the choices you have. It applies to this site and to nothing else.
Account information. When you create an account, we collect your email address, the display name you choose, and a password. Your password is handled entirely by our authentication provider (Supabase Auth) and stored in hashed form — we never see or store your raw password. If you choose “Continue with Google” instead, we receive your name, email address, and profile photo from Google rather than collecting a password.
Order information. When you place an order, we store the items and quantities you selected, order totals, any pickup notes you leave for us, and the order's status as it moves through fulfillment.
Payment information. Card payments are processed entirely by Stripe. We never receive or store your full card number — we store limited payment metadata (such as Stripe's checkout and payment identifiers, payment status, and order amounts) so we can match payments to orders. If you pay by Venmo, that payment happens directly between you and our Venmo account, outside this site; we only store the order code used to match your payment and whether you've told us payment was sent.
Technical information. We use one essential, secure session cookie (set by Supabase Auth) to keep you signed in. We do not use third-party advertising or analytics cookies.
We don't sell your personal information, and we don't share it with advertisers. We share information only with the service providers that make the site work:
Each of these providers only receives what it needs to perform its function, and each has its own privacy policy governing how it handles data on our behalf.
We keep your account and order records for as long as your account is active, and for a reasonable period afterward as needed for tax and business recordkeeping. You can ask us to delete your account and personal information at any time, as described below.
To exercise any of these, just email us at the address below.
The Gnomestead is not directed at children, and we do not knowingly collect personal information from anyone under 13.
We use encrypted connections (HTTPS) throughout the site, rely on our database provider's row-level security to limit who can access what data, and never store full card numbers ourselves. No method of transmission or storage is ever 100% secure, but we work to protect your information using practices appropriate for a site this size.
If we make material changes to this policy, we'll update the effective date above. Continued use of the site after a change means you accept the updated policy.
Questions about this policy, or want to exercise any of the choices above? Email us at JenAndMerek@gmail.com.