Privacy

Herdcore is a farm records program. Most of what it holds never leaves the farm it belongs to, and that is the whole design rather than a setting. This page says plainly what is kept, where it is kept, and who else sees any of it.

Herdcore never shares your data with a third party. Nothing you put into it is sold, rented, traded or handed over for anybody else's use - not to advertisers, not to analytics, not to data brokers, not to partners, and not to another farm. There is no advertising, no analytics and no tracking of any kind in any of the programs. The only outsiders that touch the data at all are the ones that carry the service itself, and they are all named on this page.

Answerable for the data: [the company answerable for the data].

What stays on the farm's own computer

The records themselves are kept on the farm's own computer, in a database of its own: the animals, the weights, the medicine, the books, the documents and the reports. A farm that never makes an account has nothing of its own in the cloud at all, and can use the whole program with no internet.

What is kept when an account is made

• The name and email address on the account, and a phone number if one was given.
• The farm's name and address.
• The person's role on the farm.
• The plan the farm is on, and the date it runs to.
• Each device that has signed in: a label, when it was first used and last synced, and a hash of its sign-in token. The token itself is never stored, only its hash, so a copy of the database is not a set of working sign-ins.
• Codes that have been handed out, again only as hashes, and only until they are used or run out.

What syncs, once a computer is joined to the farm

Once sync is switched on, the farm's records travel up as they are changed and come back down to the farm's other devices. The server stores what it is sent and hands it back; it does not make anything else out of it. When a record is deleted it is deleted from the server too, and a marker is kept in its place so the farm's other devices hear about the deletion.

Who else sees anything at all

These are the only outsiders involved, and they are carriers rather than recipients: each of them handles the data on our instructions and for nobody's use but the farm's. Nothing else about the programs talks to anybody.

• Nobody else, ever. Nothing here is sold, rented, traded or shared, and no third party is ever given access to your records for their own purposes. There is no advertising, no analytics and no tracking in any of the programs, and nothing is profiled, mined or passed on.
• Storage. An account, and anything synced to it, is kept on the cloud platform the service runs on. It holds the data for the farm and never uses it for itself.
• Email. A forgotten-password code is sent through Resend, which sees the email address and the message. Nothing else is emailed.
• Maps. When a boundary is drawn, the map pictures come from OpenStreetMap and Esri. Those services see which pieces of map were asked for, which is a rough idea of where the farm is. Nothing about the farm travels with them.

How long things are kept

• Farm records: until they are deleted, or until the farm asks for its account to be closed.
• A device's sign-in: it runs out after 180 days without syncing for a farm computer, or 30 days for a browser session, and it can be dropped from the farm's device list at any time.
• Codes: 30 minutes for a password reset, 90 days for joining a machine, and in both cases only until they are used.
• Changing a password signs every device out of sync straight away.

What a farm can decide

• Keep everything on the farm by never making an account.
• Drop a device from the farm so its sign-in stops working.
• Ask for the account and the synced records to be deleted. There is no button for this yet, so write to [add a contact address] and it will be done by hand.

Changes

If this changes, the date below changes with it. The date is the only version that matters.

Last changed: [a date]