What this site collects

Reading the site requires nothing from you. There are no accounts, no logins, no comment system, and no advertising or advertising trackers of any kind. No web fonts are loaded, and every image, including every photograph, is served from this domain. The only third-party code on the page is the two analytics scripts named below.

Three things collect something.

Analytics

Two things count visits, which is more than strictly necessary and is being narrowed down.

• Google Analytics 4. It sets cookies and records a rough location, the pages you view and what kind of device you are on. It is not used for advertising, and no data is sold or shared for advertising.
• Watchtower, a small self-hosted counter running on watchtower.adamstoner.com, which belongs to the same person as this site. It sets no cookies and stores nothing on your device. Each page view sends one message containing the page path, the page you arrived from, and any campaign parameters in the address. That is the whole of it.

If you would rather not be counted, any of these will stop both: a browser that blocks trackers, a content blocker, or the Google Analytics opt-out add-on. Nothing on the site breaks if you do.

Downloads of the PDFs, the .txt feeds and the API

A PDF cannot carry an analytics script, so downloads of the printable sheets, the llms.txt feeds and the JSON API are counted at the point the file is served instead. One event is recorded: which file, its type, and the two-letter country code the request came from.

Your IP address is never stored or sent anywhere. It is combined with your browser's user agent and today's date, hashed, and the hash is used as a throwaway identifier so that downloading three sheets in an afternoon counts as one person rather than three. The hash changes daily and cannot be reversed. Requests that look like crawlers are not counted at all, and requests sending the Global Privacy Control signal are skipped entirely.

The nursery suggestion form

If you use the form on where to buy milkweed, it stores what you type: the nursery name, its website, its location and your note. Those details exist to be published, which is the point of suggesting them.

An email address is stored only if you tick the consent box, and only so that somebody can reply to you about that suggestion. It is not added to any mailing list. There is no mailing list.

Your IP address is not stored. It is held for sixty seconds to stop the form being flooded, then it expires by itself. A two-letter country code is recorded, which is not enough to identify anyone.

What this site does not do

• No advertising, ad networks or retargeting.
• No selling or sharing of personal data. Ever, to anyone.
• No third-party embeds, social widgets or tracking pixels.
• No profiling and no automated decisions about you.
• No newsletter sign-ups hidden inside other forms.

Cookies

The only cookies set are Google Analytics ones. The site itself sets none and needs none, which is why there is no cookie banner nagging you on arrival.

Your rights

You can ask for a copy of anything held about you, ask for it to be corrected, or ask for it to be deleted, and it will be done promptly and without argument. In practice the only thing that could exist is an email address attached to a nursery suggestion.

If you are in the UK or the EU, the UK GDPR and GDPR give you those rights formally. The lawful basis for storing a suggestion is legitimate interest in maintaining a public directory; for the optional email address it is your consent, which you may withdraw at any time.

Children

The site is safe for children to read and the classroom resources are written for them, but the forms are not aimed at under-13s and no personal data should be submitted by a child.

Changes

If this notice changes in a way that matters, the change will be described here rather than quietly slipped in. This version is current as of August 2026.