Privacy Policy
Last Updated: 16 February 2026
1. Who We Are
Graze Planner ("we", "us", "our") is a web-based paddock rotation planning tool for Australian dairy and beef farmers. This policy explains how we handle your information when you use our service at graze.free.nf.
2. What Information We Collect
Account Information
- Name — Your full name, used to identify your account
- Email address — Used for login and, if you opt in, important notifications
- Password — Stored securely using one-way encryption (bcrypt). We cannot see your password.
Farm Information
- Farm name and location — Your farm name, latitude, and longitude coordinates
- Paddock data — Names, areas, boundaries (GeoJSON), and preferences you enter
- Herd data — Herd names, head counts, and grazing mode configurations
- Grazing records — Planned and confirmed grazing events including dates, paddocks, and sessions
Technical Information
- Session data — Temporary tokens to keep you logged in securely
- Login timestamps — Used for security monitoring and failed-login lockouts
3. How We Use Your Information
We use your information solely to:
- Provide and operate Graze Planner for your farm
- Calculate paddock rest days and generate grazing suggestions
- Display your farm map with paddock boundaries and weather data
- Secure your account with login protection and session management
- Generate CSV exports when you request them
4. Third-Party Services
Graze Planner uses the following third-party services, which may receive limited data:
- Open-Meteo — Receives your farm's latitude/longitude to fetch weather forecasts. No personal information is shared. Open-Meteo Terms
- OpenStreetMap / Nominatim — Receives coordinates for reverse geocoding (place names) and tile imagery. OSM Privacy
- Esri ArcGIS — Provides satellite tile imagery for the map view. No personal data is sent.
5. Data Security
We take the security of your data seriously:
- Passwords are encrypted using bcrypt — even we cannot read them
- Sessions are hardened with HTTP-only, secure, and SameSite cookie flags
- CSRF protection is active on all data-modifying requests
- Rate limiting on login prevents brute-force password attacks (5 attempts per 15-minute window)
- Farm isolation ensures that your data is never accessible to users from other farms
6. Data Retention
- Your data is retained for as long as your account is active
- Grazing logs are stored indefinitely as part of your farm's historical record
- If you wish to have your account and data deleted, contact us at support@grazeplanner.com.au
7. Your Rights
As an Australian user, under the Australian Privacy Act 1988 and the Australian Privacy Principles (APPs), you have the right to:
- Access your personal data — you can view all your data within the app at any time
- Correct your data — update your profile, farm details, and records via Settings
- Export your data — download your grazing logs as CSV at any time
- Delete your data — contact us to request full account deletion
8. Cookies
Graze Planner uses only essential session cookies to keep you logged in. We do not use tracking cookies, advertising cookies, or third-party analytics such as Google Analytics.
9. Children's Privacy
Graze Planner is designed for use by farm managers and staff. We do not knowingly collect information from individuals under 16 years of age.
10. Changes to This Policy
If we make significant changes to this policy, we will update the "Last Updated" date at the top. We encourage you to review this page periodically.
11. Contact Us
For any privacy-related questions or data requests:
- Email: support@grazeplanner.com.au