What we record when you scan a QR code

When you open a product page (including from the QR code on the package), we record one view so the producer knows where labels are scanned and which lots people look at.

What we record

• The product and the lot code on the label (if any), how the page was opened (QR or web), and the referring site's domain (never the full address).
• Country (derived from the network, nothing finer), device class (phone / tablet / computer), and the language you chose.
• A random session code stored in your browser, and whether you have opened a page in this browser before.
• A few actions on the page: opening a section, opening a lot's farming log, clicking to verify a certificate.

What we do not record

• No IP address or browser string (User-Agent) — only a salted hash that changes every day.
• No location coordinates, and no name, email or phone number unless you sign in.
• No tracking cookies, no third-party pixels or advertising scripts.

Retention and access

Data is deleted automatically after 13 months. Producers can see the views of their own product pages with exactly the fields listed under "What we record" (including the random session code and the time), plus the three on-page actions; Garden Market operations staff can see all views. The IP / browser hashes stay inside the database — no producer or staff member can see them through the app. The data is not shared outside Garden Market and the producer concerned.