Privacy Policy

1. Scope

FARMS.MARKET LLC, a Wyoming, USA limited liability company, operates the FARMS.MARKET website and public directory (the "Service"). In this policy, "we," "us," and "our" mean FARMS.MARKET LLC. We decide how and why the Service uses personal information and act as its data controller where that term applies. Contact us at hello@farms.market.

This policy covers visitors, account holders, people who contact us, and individuals whose business details appear in the directory. The directory covers farmers markets and, where enabled, farms. It does not cover another business's handling of information when you visit its site, contact it, or buy from it.

FARMS.MARKET does not run online sales, payments, shipping, or delivery. We do not collect payment-card or order details through the directory.

Our Terms of Service govern use of the directory. This policy explains our data practices; it does not ask you to waive privacy rights.

2. Information We Collect

Account information

When you sign in, we collect your email address. You may add a display name and username and choose whether to get email updates about listing requests. Sign-in codes confirm access to an email address. They do not prove ownership of a farm or market.

Directory activity

If you use account features, we store the listings you favorite, signed-in shares, claims, listing reports, listing requests, check-ins created by older versions of the Service, and their status. Signed-in claims, reports, and contact messages can link to your account. A signed-in share records one share per account and listing. Anonymous link copies do not create an account share record.

Information you submit

A listing request or owner edit may include a farm or market name, organization, address, email, phone number, website, social links, description, hours, products, payment methods, food assistance, production methods, vendor count, sales channels, and market links. A report may include the listing sections you flag and your notes. A contact message may include your name, email, subject, and message. If you email us directly, we also receive your email content, sender details, and any attachments.

We review listing requests before publication. If we publish a listing, its business details may become public. Do not submit a private home address, personal phone number, or other personal information unless you want it reviewed for the directory and have the right to share it.

Public sources and other people

We also collect business listing details from public sources, including USDA directory data, business websites, and information supplied by owners and other users. Those details can include personal information when a business address or contact belongs to an individual. A listing can appear without that person having an account. You may ask us to correct or remove personal information using the contact details below.

Location

If you grant browser location access, the map uses your location to show distance and sort nearby listings. The site keeps this location in the current page state rather than your account profile. You can deny or revoke location access in your browser or device settings and still search the directory. Map providers receive requests for the area shown on the map. When the map centers on you, those requests can reveal your approximate location to the provider.

Device and request data

Our servers and service providers may receive data that browsers send with requests, such as IP address, browser and device type, requested page, referring page, date, and time. We use this data to deliver, secure, and diagnose the Service.

Sign-in and contact-form abuse controls use IP addresses and hashed email addresses to limit requests. A hash is a derived identifier, not a guarantee of anonymity. Support and security logs may also contain account identifiers, email addresses, delivery errors, and other details needed to investigate a request.

3. Cookies and Browser Storage

We use required cookies to run email-code sign-in, keep your session active, protect the sign-in flow, and sign you out. These cookies include access, refresh, and short-lived sign-in state values. Blocking them can stop account features from working.

The web session cookies are named web_access_token and web_refresh_token. The short-lived web_auth_state, web_auth_redirect, and web_auth_verifier cookies protect the sign-in flow and return you to the requested page. The sign-in provider also stores authentication state. Sign-in state and email codes expire after 10 minutes. Web session cookies can remain for up to 400 days when refreshed, although the tokens inside them have shorter lifetimes. Signing out clears the web session cookies in that browser.

The listing form uses session storage in your browser to keep a draft during sign-in and while you move through the form. The draft stays in that browser session until the form clears it or the browser ends the session. FARMS.MARKET does not use the directory to serve targeted ads.

We do not use advertising pixels or track your activity across other websites. We do not sell personal information or share it for cross-site targeted advertising. Browser Do Not Track and Global Privacy Control signals do not change these practices. Required sign-in cookies still work when those signals are enabled. Third-party map services receive request data when their resources load; their privacy policies govern their own use of that data.

4. How We Use Information

We use information to:

• create accounts, send sign-in codes, and keep sessions active
• show saved listings and account activity
• count signed-in favorites and shares
• review listing requests, claims, and reports
• publish approved business listing details
• save and publish authorized owner edits and locate submitted business addresses
• reply to contact messages and send listing-request updates
• prevent abuse, enforce limits, secure the Service, and fix errors
• meet legal duties and protect users, the public, and the Service

Where a law requires a legal basis for processing, we rely on providing the account services you request, our legitimate interests in maintaining an accurate directory and securing the Service, legal obligations, or consent where required. We weigh legitimate interests against your rights. Optional location access relies on your permission, which you can withdraw in browser or device settings. We do not use personal information to make solely automated decisions that produce legal or similarly significant effects on you.

5. What Other People Can See

Public listing pages can show a farm's or market's name, address, contact details, hours, links, products, programs, and other business facts. They can also show total favorite and share counts and listing badges. We do not make your account email public merely because you favorite, share, claim, or report a listing.

Approved owners can edit a listing's description, contact details, and hours. Market owners can also edit organization and season details. Saved edits can appear publicly. Changes to names, page addresses, and main locations require review.

Public listing details can appear in search engines, map previews, and links shared by other people. Search services and other third parties may index or copy public pages. Removing a detail from our Service does not automatically remove copies held by others.

6. When We Share Information

We may share information with:

• Cloudflare for hosting, sign-in tools, email delivery, security, and logs, including account identifiers, email delivery details, and request data as needed for those services
• PlanetScale to store account, listing, and submission records in our database
• Resend to store existing newsletter contact records, including subscribed email addresses
• CARTO, OpenStreetMap, and GitHub-hosted files for maps and map data; these resource requests can disclose IP addresses and the area displayed
• The US Census Bureau geocoder, which receives submitted seasonal venue addresses to locate them on a map
• advisers or authorities when law requires it or when needed to protect rights, safety, and security
• a buyer or successor as part of a merger, sale, financing, or transfer of the Service

Opening directions can take you to Google Maps. These providers receive the usual request data described above. We do not sell personal information. We do not share payment or shipping data because the Service does not collect it.

We operate from the United States and use providers with systems in the United States and other countries. Your information may be processed outside your state or country, where privacy laws may differ. Any transfer remains subject to the data-protection requirements that apply; using this site does not waive those rights.

7. Email

We send sign-in codes when you request them. Listing-request email updates are on by default for new accounts. You can turn them off in your profile. While enabled, we may email you when staff reviews a listing request. Turning that setting off does not stop sign-in codes or replies to an action you requested.

We store account emails and contact messages in our database so we can run your account, handle requests, and reply. Creating an account, sending a message, or submitting a listing does not sign you up for a newsletter. We do not treat those actions as permission to send marketing email.

Newsletter signup is currently closed. If you previously signed up, your address may remain in our Resend contact list, separate from your site account. We use that list for newsletter subscriptions. To leave the list, use an unsubscribe link in a newsletter or email hello@farms.market with the subscribed address. We may need to confirm access to that address. Account deletion attempts to remove a newsletter contact when its provider ID is linked to the account. Separate contacts and failed provider removals need a separate request; do not rely on account deletion to unsubscribe.

8. Export, Correction, and Deletion

From your profile, you can update your display name, username, and listing-request email setting. Your email is read-only in the profile. Email hello@farms.market to ask about an email change or a correction that you cannot make yourself. Approved listing owners can use the listing editor to update supported public fields or request other changes.

You can download a limited JSON copy of data linked to your account after confirming a new email sign-in code. The export has record and file-size limits, and it omits precise check-in coordinates. It includes contact messages and reports only when they link to your account. Older email-only records may not appear because an email match alone does not prove who sent them.

The account download is a self-service tool, not a limit on your legal right to access information. Contact us if it fails, omits records you seek, or reaches a size limit. We will review the request separately under the law that applies.

You can also delete your account from your profile. Account deletion removes or de-identifies your profile and linked account activity and removes listing ownership. We keep an internal account ID and record timestamps, but clear the name and username and replace the account email with a non-deliverable deletion marker. Public farm and market listings, including their business contact details, and aggregate share counts may stay live. Account deletion does not remove email-only submissions, separate email correspondence, or copies held by third parties. Information may remain in backups, security logs, and provider systems.

To request removal of personal information from a public listing, an email-only submission, or other records, email hello@farms.market. Include the relevant address or page URL. We may need to confirm your identity or authority before changing a record.

9. Retention

We keep account and submission records while an account remains active or while we need them to handle requests, maintain the directory, prevent abuse, meet legal duties, or resolve disputes. The period depends on the record's purpose, sensitivity, and legal requirements. Public business listings can remain after an account closes, subject to correction and privacy requests. We have not set a uniform deletion period for public listings, correspondence, backups, or server logs.

Sign-in state expires after 10 minutes. Access tokens last one hour, and refresh tokens have a 30-day lifetime that can renew with use. Listing drafts remain in session storage until the form clears them or the browser session ends. Clearing browser storage removes the local draft, not records already sent to us.

10. Your Rights

Depending on where you live and which laws apply to us, you may have rights to confirm whether we process your information, access it, correct it, delete it, receive a portable copy, restrict processing, or object to certain uses. Where we rely on consent, you may withdraw it without affecting processing that was lawful before withdrawal. We do not sell personal information or share it for cross-site targeted advertising.

Email hello@farms.market with your request and state or country of residence. You do not need an account. We may request information needed to verify your identity or an authorized agent's authority. Do not send identity documents unless we ask for them. We will respond within the period required by applicable law and explain any permitted denial or extension. We will not discriminate against you for exercising a protected privacy right.

If we deny a request, you may reply to ask for review and identify it as a privacy appeal. Where applicable, you may also complain to your state attorney general or data-protection authority. Legal exceptions may require or permit us to retain some information. We will explain an exception when required.

11. Security

We use safeguards meant to protect information, but no online service can guarantee complete security. Protect access to your email account because email codes can open your FARMS.MARKET account. Sign out on a shared device and contact us if you suspect misuse.

12. Children

This directory serves a general audience and is not directed to children under 13. We do not knowingly collect personal information from children under 13. Children under 13 must not create accounts or submit personal information. If you believe a child has submitted it, email hello@farms.market so we can investigate and remove it as required by law.

13. Changes to This Policy

We may update this policy as the Service changes. We will post the revised text and effective date on this page. For material changes, we will give additional notice or seek consent where the law requires it. A policy update does not override consent requirements or rights that apply to information already collected.

14. Contact

FARMS.MARKET LLC, Wyoming, USA. Send privacy questions, requests, or complaints to hello@farms.market. You may also use the contact form without an account. Tell us what data or account your request concerns. Do not send passwords or sign-in codes.