Privacy Policy

Last modified: March 2026

Introduction

Grovetracks LLC ("Company" or "We") respects your privacy and is committed to protecting it through our compliance with this policy. This policy describes the types of information we may collect from you or that you may provide when you visit grovetracks.com (our "Website") and our practices for collecting, using, maintaining, protecting, and disclosing that information.

This policy applies to information we collect:

On this Website.
In email, text, and other electronic messages between you and this Website.
Through mobile and desktop applications you download from this Website.

This policy does not apply to information collected by:

Us offline or through any other means, including on any other website operated by Company or any third party; or
Any third party, including through any application or content that may link to or be accessible from the Website.

Children Under the Age of 13

Our Website is not intended for children under 13 years of age. No one under age 13 may provide any personal information to or on the Website. We do not knowingly collect personal information from children under 13. If you are under 13, do not use or provide any information on this Website, register on the Website, make any purchases, use any interactive features, or provide any information about yourself to us.

If we learn we have collected or received personal information from a child under 13 without verification of parental consent, we will delete that information. If you believe we might have any information from or about a child under 13, please contact us at support@grovetracks.com.

Information We Collect About You and How We Collect It

We collect several types of information from and about users of our Website, including information:

By which you may be personally identified, such as email address, display name, date of birth, or any other personal information category collected ("personal information");
That is about you but individually does not identify you; and/or
About your internet connection, the equipment you use to access our Website, and usage details.

We collect this information:

Directly from you when you provide it to us.
Automatically as you navigate through the site.
From third-party authentication providers (Google, Apple) when you use social sign-in.

Information You Provide to Us

The information we collect on or through our Website may include:

Account registration data: email address, display name, date of birth, and password (hashed; we never store plaintext passwords). For social sign-in via Google or Apple, we receive your name and email address from the identity provider.
Authentication data: Your account is managed through Amazon Cognito. We store a unique identifier (Cognito sub ID) and authentication tokens. When using Google or Apple sign-in, OAuth tokens are processed by Cognito and are not stored by Grovetracks directly.
Age declaration and consent records: date of birth, IP address, user agent, consent version, and the text of the terms you agreed to. These records are maintained for COPPA compliance.
Composition data: strokes (drawing data), integrations (references to other compositions), ancestry chains (the lineage of derivative works), titles, tags, and metadata.
Traced compositions: when you trace a photo, we store the resulting stroke data and a reference to the source image. If the source is from Unsplash, we store the Unsplash photo ID and photographer attribution.
Content classification results: our client-side NSFW classifier (NSFWJS) runs entirely in your browser. No images are sent to our servers for classification. We store only the resulting classification label.
Virtual currency data: seed balance, transaction history, trellis purchases, and bloom records.
Activity and notification preferences: your chosen notification settings for follows, integrations, and tree activity.
Payment data: payment is processed entirely by Stripe. We never receive, store, or process your credit card number, CVV, or billing address. We receive only a transaction confirmation, amount, and Stripe customer/payment IDs.

Information We Collect Through Automatic Data Collection Technologies

As you navigate through and interact with our Website, we may use automatic data collection technologies to collect certain information, including:

Details of your visits to our Website, including traffic data, location data, logs, and other communication data.
Information about your computer and internet connection, including your IP address, operating system, browser type, and user agent.

The technologies we use may include:

Essential cookies: Small files placed on your device that are necessary for the Website to function (authentication session, age gate verification, cookie consent preference). See our Cookie Policy for details.
Analytics cookies (optional): If you consent, we use Google Analytics (GA4) to understand how visitors use the Website. These cookies are only set after you opt in via our cookie banner.

We do not engage in behavioral tracking or interest-based advertising.

How We Use Your Information

We use information that we collect about you or that you provide to us, including any personal information:

To present our Website and its contents to you.
To provide you with information, products, or services that you request from us.
To process your purchases and manage your virtual currency balance via Stripe.
To maintain composition ancestry chains and attribution for derivative works.
To enforce our Content Policy, including NSFW classification and moderation.
To fulfill any other purpose for which you provide it.
To provide you with notices about your account.
To carry out our obligations and enforce our rights arising from any contracts entered into between you and us.
To notify you about changes to our Website or any products or services we offer.
To allow you to participate in interactive features on our Website.
For any other purpose with your consent.

Disclosure of Your Information

We may disclose aggregated information about our users, and information that does not identify any individual, without restriction.

We may disclose personal information that we collect or you provide:

To our subsidiaries and affiliates.
To contractors, service providers, and other third parties we use to support our business (including Stripe for payment processing and Amazon Web Services for hosting and authentication), who are bound by contractual obligations to keep personal information confidential.
To a buyer or other successor in the event of a merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of some or all of Grovetracks LLC's assets.
To fulfill the purpose for which you provide it.
For any other purpose disclosed by us when you provide the information.
With your consent.

We may also disclose your personal information:

To comply with any court order, law, or legal process.
To enforce or apply our Terms of Service and other agreements.
If we believe disclosure is necessary or appropriate to protect the rights, property, or safety of Grovetracks LLC, our users, or others.

We do not sell personal information to third parties. We do not share personal information with third parties for their direct marketing purposes.

Choices About How We Use and Disclose Your Information

Cookie preferences: You can manage your cookie preferences through our cookie banner. You may accept all cookies (including analytics) or limit to essential cookies only.
Notification preferences: You can control which activity notifications you receive through your account settings.
Account deletion: You may request deletion of your account and associated personal data by contacting support@grovetracks.com.

Your State Privacy Rights

State consumer privacy laws may provide their residents with additional rights regarding our use of their personal information.

California, Colorado, Connecticut, Delaware, Florida, Indiana, Iowa, Montana, Oregon, Tennessee, Texas, Utah, and Virginia provide (now or in the future) their state residents with rights to:

Confirm whether we process their personal information.
Access and delete certain personal information.
Correct inaccuracies in their personal information (excluding Iowa and Utah).
Data portability.
Opt-out of personal data processing for targeted advertising (excluding Iowa), sales, or profiling in furtherance of decisions that produce legal or similarly significant effects (excluding Iowa and Utah).
Either limit (opt-out of) or require consent to process sensitive personal data.

To exercise these rights, contact us at support@grovetracks.com.

Data Security

The safety and security of your information also depends on you. Where we have given you (or where you have chosen) a password for access to certain parts of our Website, you are responsible for keeping this password confidential.

Unfortunately, the transmission of information via the internet is not completely secure. Although we do our best to protect your personal information, we cannot guarantee the security of your personal information transmitted to our Website. Any transmission of personal information is at your own risk.

Changes to Our Privacy Policy

It is our policy to post any changes we make to our privacy policy on this page. The date the privacy policy was last revised is identified at the top of the page. You are responsible for periodically visiting this privacy policy to check for any changes.

Contact Information

To ask questions or comment about this privacy policy and our privacy practices, contact us at: support@grovetracks.com