Privacy policy
BurrowLog is made by Lark Software. This policy covers the BurrowLog mobile apps, the web app at app.burrowlog.com, and this website.
What we hold
Account data. Your email address, the display name you choose, and your preferences (units, date format, theme, language).
Your records. The rabbitries you create and everything in them: rabbits, breedings, litters and kits, weights, tasks, and cages, including any free text you enter such as notes and a rabbitry's location.
Sign-in events. When you sign in, the authentication service records the event.
Mailing list entries. If you give us your email address on the sign-up page, we hold that address, the date you gave it, which link you arrived through, and an irreversible digest described under Counting visits. Nothing else: we do not ask for your name, your rabbitry, or how many rabbits you keep.
The apps and this website contain no advertising or crash-reporting services, set no cookies, and load nothing from third parties. The one thing we count is described next.
Counting visits
We count how many people see the sign-up page and how many fill it in, so we know whether telling people about BurrowLog is working. We do it with a one-pixel image served from burrowlog.com itself — not a third-party script, and not a cookie.
To avoid counting the same person twice in a day, that image records a digest: your IP address and browser name run through a one-way function together with the day's date and a secret we hold. The digest cannot be turned back into your IP address, and because the date is part of it, today's digest cannot be matched against tomorrow's. We do not store your IP address or your browser name.
We keep those digests while we are still counting, and delete them when we are not. They are of no use to anyone else: a digest cannot be turned back into a person, and it cannot be matched to the same person on another day.
Leaving the mailing list
Every email we send carries an unsubscribe link. One click is all of it — no sign-in and no questions. We keep the address marked as unsubscribed rather than deleting the row, so that a later sign-up form cannot quietly put you back on the list. If you would rather we erased it outright, ask at the address below and we will.
Mail to the list is sent through Postmark with open tracking and link tracking switched off, so we do not know whether you opened anything.
Guest mode
The mobile app can be used without an account. In guest mode your records stay on the phone and nothing is sent to us.
Where it is held and who processes it
Your account data and records are stored on Amazon Web Services in the United States (the us-east-2 region). We use these processors:
- Amazon Web Services hosts the service and provides sign-in (Amazon Cognito), which holds your email address and sign-in events.
- Postmark delivers account email such as verification codes, and mailing list email, and holds the recipient address and message content.
- Stripe handles subscription payments for the web app. Your card details go to Stripe and never reach us; we hold your Stripe customer ID and subscription status.
We do not sell your data and do not share it with anyone else.
Deleting your data
You can delete your account at any time; see Delete account. Deletion ends your sign-in, removes the rabbitries you own and their records and files, and cancels any active subscription. Within 30 days of deletion we permanently erase the account and its records from our database, and database backups expire after 7 days. Stripe keeps its own record of past payments (invoices) for tax purposes.
A mailing list entry is separate from an account: deleting an account does not take the address off the list, and leaving the list does not touch an account. See Leaving the mailing list.
Contact
Questions about this policy go to support@larksoftware.com.