Last updated: October 29, 2026
Short version: Leaftail has no accounts, no analytics, no ads, no cookies and no trackers. Everything you type in the app (pets, plants, reminders, weights, notes, photos) stays in your browser on your device. We never receive it, so we cannot see, sell, share or lose it.
Leaftail ("we", "us") is an independent software product sold under the Dowel Pages studio brand. We are the controller for the small amount of personal data described in sections 4 and 5. Contact: dowelpages+leaftail@mail.grokbot.com (see also our Contact page).
Your pets and plants, their reminders, care history, weights, notes, optional photos, settings and your Pro license key are saved only in your browser's local storage (keys named leaftail.v1 and leaftail.license). Photos are shrunk on your device before they are saved. The app files are also cached on your device so it works offline. Calendar (.ics), CSV, printable and backup files are created on your device and go only where you choose to save or share them. None of this is sent to us or to anyone else. This storage is strictly necessary to provide the app you asked to use, so no consent banner is needed and none is shown.
How to delete it: open the app → Settings → Delete all my data on this device. Clearing your browser's site data for leaftail.pages.dev also deletes it. Use Download backup first if you want to keep a copy; backups are files you control.
We do not use cookies, analytics, advertising, social media pixels, fingerprinting or any third-party scripts. We do not sell or share personal information, and we do not use it for targeted advertising or profiling. Because there is nothing to opt out of, Global Privacy Control and "Do Not Track" signals are automatically respected.
The website is served by Cloudflare (Cloudflare Pages). Like any web host, Cloudflare processes technical data such as IP address, browser type and the requested page to deliver the site and protect it from abuse (this can include a strictly necessary security cookie set by Cloudflare), under its own privacy policy. We do not use these logs to identify you. Legal basis (EU/UK GDPR): our legitimate interest in running a secure website (Art. 6(1)(f)).
If you buy Pro, payment is handled by Stripe, which receives your card details, email and country under its own privacy policy. We never see your full card number. We receive the order record (email, amount, date, country, Stripe payment ID) to deliver your key, give refunds and keep the accounting and tax records the law requires. If you email us, we use your message only to reply. Legal bases: performance of a contract (Art. 6(1)(b)) and legal obligations (Art. 6(1)(c)).
Order records: as long as tax and accounting laws require (usually 5 to 10 years). Support emails: up to 24 months after the conversation ends, then deleted. App data: we never hold it.
Stripe and Cloudflare may process data in the United States and other countries. They use safeguards such as the EU Standard Contractual Clauses and/or the EU-U.S. Data Privacy Framework.
Depending on where you live (for example under the EU/UK GDPR, the LGPD, or California and other US state privacy laws) you can ask to access, correct, delete or receive a copy of your personal data, object to or restrict its use, and withdraw consent. Email dowelpages+leaftail@mail.grokbot.com; we reply within 30 days and will not treat you differently for asking. Data in the app is already fully under your control (see section 2). You can also complain to your local data protection authority.
Leaftail is not directed to children. You must be at least 16 to use it (18 to buy Pro). We do not knowingly collect data from children under 16; if you think a child sent us data, email us and we will delete it.
The site is served only over HTTPS with strict security headers (Content-Security-Policy, HSTS and others) and loads no third-party code. Because your app data never leaves your device, keep your device and backups protected.
If we ever add anything that changes this (for example privacy-friendly analytics), we will update this page and the date above before it goes live, and ask for consent where the law requires it.