Privacy

Last updated: 18 October 2026. This notice describes the current setup. Public pages are available to visitors; operational areas remain access protected. Amazon product links are affiliate links; checkout and Keeper tools are disabled.

Who is responsible for your information?

The data controller is Josh Harrison, sole trader trading as Wildform. For privacy questions or requests, contact [email protected].

Information we handle

• Messages you send: information and contact details you include in emails to our general, support, corrections or privacy group addresses. There is no website contact form.
• Site-use measurements: selected page and interaction events are added immediately to daily aggregate counts. The count records date, event, subject/content, page type and optional product, category, species or recommendation context. A search event records that a search occurred, not the words entered. The application does not retain an individual event row or an IP address, browser user-agent or visitor/session identifier in these site-use records. Measurement requests omit browser cookies. Providers may separately process connection information, as described below.
• Keeper tools: the planner, saved lists, comparisons, reminders, feedback and activity counts are disabled and accept no new Keeper data. A pre-deletion private backup snapshot may retain a copy until its 30-day lifecycle expiry.
• Affiliate activity: Amazon product links include Wildform’s Associate tracking ID. They open Amazon directly; Wildform redirect tracking and affiliate click measurement are inactive. No affiliate click records are currently collected.

Please avoid putting passwords, payment details or sensitive personal or animal-health information in free-text notes or emails.

Why we use information

We use messages to respond to enquiries, support requests, corrections and privacy requests. For ordinary correspondence, our UK GDPR lawful basis is legitimate interests: receiving and answering messages sent to us, using only the contact and message details needed to respond. We do not use this correspondence for marketing or profiling, and access is limited to the owner. Where a message requires us to meet a specific legal obligation, such as handling a data-protection rights request, we rely on that legal obligation for the necessary processing. We use aggregate site-use counts to decide how to improve pages and guidance; they are not used to build individual profiles or target individual visitors. For these limited site-use measurements, we rely on legitimate interests as the UK GDPR lawful basis. You can stop future measurement in this browser using the free control on the Cookies page.

Service security

To protect the service from excessive or abusive requests, the application temporarily processes the network address supplied with a request. It converts that address into a salted identifier and keeps rate-limit counters only in server memory. These identifiers are not stored in the application database or its backups and are not used for advertising or visitor profiles. Limits operate in configurable short time windows; expired counters are removed during subsequent request cleanup, when memory limits require it, or when the server process ends. Our lawful basis for this limited security processing is legitimate interests: protecting the service and its visitors.

Who receives information?

Google Workspace handles messages sent to our group inboxes. Render hosts the application and live database in Frankfurt, Germany. Cloudflare provides DNS, network security and Cloudflare Access; the R2 backup bucket is in Western Europe. These providers may process technical connection or authentication information to deliver, secure and troubleshoot the service.

At the account-configuration checks recorded on 27 September 2026, the Render workspace was Hobby and no default log stream was configured; Render publishes a 7-day service-log retention for Hobby. Cloudflare Zero Trust was Free; its published retention for Access logs is 24 hours. Worker Observability logging was disabled at that check. These provider log periods are separate from Wildform’s site-use counts, email and R2 backup retention. Render logging information · Cloudflare Zero Trust log retention.

Google Workspace, Render and Cloudflare provide data-processing terms for their services. Providers may use subprocessors and process information outside the UK. Their published terms describe applicable transfer safeguards, including contractual protections where required. See the Google data-processing terms, Render data-processing terms and Cloudflare data-processing terms for details and subprocessor information.

Following an Amazon affiliate link connects your browser directly to Amazon. Amazon receives the tracking ID and the Wildform website origin and may use cookies or other technologies under its own privacy and cookie notices to attribute qualifying purchases. Wildform does not receive your Amazon order or payment details.

How long we keep information

Site-use totals are removed from the live database after 90 days. Cleanup runs at service startup and at least daily. Older detailed event rows were converted to daily totals and removed from the live database. A private R2 snapshot made before that conversion may retain the old rows until its own 30-day lifecycle expiry.

No new Keeper data is collected. A private snapshot made before deletion may retain a copy until its own 30-day lifecycle expiry. R2 backup objects expire 30 days after creation; that period does not restart when a live row is deleted.

We manually review and delete email messages after 90 days, including messages in the group inboxes and any copies delivered to the owner’s mailbox. Google Workspace does not automatically enforce this period.

Affiliate click records are not currently collected. Amazon handles purchase attribution on its own website.

Your choices and rights

Depending on the circumstances, you may ask for access to, correction or deletion of your personal information, request restriction, or object to processing. You may also have a right to receive information in a portable format. To stop first-party site-use measurements in this browser, use the site-use measurement control. For other privacy requests, contact [email protected]; we may need to verify your identity. You can complain to the Information Commissioner’s Office. The owner monitors this inbox; no response-time promise is made.

Changes and related information

We will update this notice when our practices change. Read Cookie and device-storage information for browser storage and session details.