Growar Campaigns Privacy

Poster creation happens in your browser. The photo you choose, the crop, and the name you type are used locally to generate the poster image and are not sent to Growar analytics.

Accounts are optional. When you choose Save to My Account after generating a poster, Growar stores only the final PNG image, not the source photo, crop settings, or typed personalization values.

Saved posters are kept in a private storage bucket and served through temporary signed URLs. You can view, download, or delete them from your account.

Growar collects basic first-party campaign analytics so admins can understand whether campaigns are being viewed and posters are being created. Events include campaign views, valid photo selections, successful poster creations, downloads, and shares.

Analytics uses a random anonymous browser session ID stored in localStorage for up to 24 hours. The server stores only an HMAC hash of that ID for deduplication. It does not store raw session IDs, raw IP addresses, photos, generated poster data, entered participant names, emails, exact location, or device fingerprints.

Raw analytics events are intended for short operational retention, currently documented as 90 days. Daily aggregate campaign stats may be retained long-term. Audit logs for administrator actions are retained separately and are not deleted on the analytics raw-event schedule.

This privacy-friendly analytics storage is first-party measurement. Legal consent requirements can vary by market, so final compliance decisions should be reviewed with legal counsel before broad international rollout.