We are a sole proprietorship in the Netherlands. This notice applies to users in the United States, Canada and Mexico. Because we are based in the EU, we handle all personal data under the EU General Data Protection Regulation (GDPR) as well; our general privacy notice has the GDPR details.
Your e-mail address, your password as a hash (argon2id, never the password itself), your language, the version of the terms you accepted, when you signed up and confirmed, and when you last used Rainplot. Purpose: your account. Kept until you delete your account. A free account that never had a license and has not been used for 24 months is deleted; you get a warning by e-mail 30 days before.
Sessions (stored as hashes, with start and end; a session lasts 30 days) and the links in our e-mails (as hashes; a confirmation link is valid for 24 hours, a password link for 6 hours). Purpose: keeping you logged in and securing your account. Kept until they expire or you log out.
How much free time you used, when it started and the counter's last beat. The server also counts by itself the minutes in which you loaded the map close up: only the number and the first time, no places. Purpose: counting the free time.
This record belongs to your mailbox, not to your account. We keep it under a keyed hash (HMAC) of your simplified e-mail address (lower case, without a +tag, at Gmail without dots), never under the address itself. It stays when you delete your account, so that a new account gives no new free time. It is still personal information: whoever has a copy of our database can check whether a given address ever had an account. Kept until 24 months after its last use.
A license: the point you bought it for (coordinates), the license's label (the coordinates of your design's center and the number of sprinklers), start and end. A payment: amount, status, Mollie's payment number, the point and the label, and the time. We never receive your card number; Mollie handles it. Purpose: providing the license, and our accounts. Licenses are kept as long as your account exists. Payments are kept for 7 years, as Dutch tax law requires. Unfinished payments are deleted after 30 days.
With every payment we also keep the evidence of your choices at checkout: when you confirmed the planning-only notice, the version of the terms and your IP address. Purpose: handling disputes and chargebacks. The IP address is deleted 24 months after the payment; the rest is kept as long as the payment.
If you delete your account, the payment keeps the amount, the status, Mollie's number, the license's label and the evidence above. It no longer keeps your account or the license's point.
Saved designs: the design, its name, the address and drawings or photos you imported (up to 50 MB per account). Purpose: saving. Kept until you delete the project or your account.
For each license and day we count the runs you started. For each run we keep a record: your account and license number, the project's name, the number of sprinklers, the settings, the timing and the outcome. For 90 days the record also holds the planner's input and a copy of the project, including the address and imported drawings, to help you with a question or a fault; only our own administrators can see them. After that the input and the copy are deleted; the rest of the record is kept for 1 year to improve the planner, or until you delete your account.
For refused or failed requests the IP address, the time, the path and the outcome; for failed logins, lockouts and limits also a short keyed code of the account, never the e-mail address; for logged-in requests sometimes your account number. Purpose: security, preventing abuse and fixing faults. Kept for 90 days, then deleted automatically.
When you search for an address, our server sends your search text to Nominatim (OpenStreetMap Foundation, United Kingdom) and to PDOK (a Dutch government service). Our server fetches map images from the providers named on the map, such as the U.S. Geological Survey, state GIS offices and Esri (United States). These services see your search text or the map area (often your own address), but not your IP address, your name or your account. Our server keeps search answers for 24 hours, without a link to you. To limit the use of map images we count per account and per IP address for one day, in memory only.
If you e-mail us, we use your message and address to help you. Kept as long as needed for your question, at most 2 years.
For every page viewed on our websites and in the app we keep your IP address, your browser and operating system (the full user agent), your screen size, the page, the page you came from (referrer), your country and the time. Our server derives your country from your IP address, using a file on our own server (IP to Country Lite by DB-IP, license CC BY 4.0). A small script of our own sends your screen size; it sets no cookie and stores nothing in your browser. Purpose: knowing how our websites are found and used. We keep this encrypted on our own server, give it to no one and delete it automatically after 2 years. The daily totals, in which you cannot be recognized, we keep without a time limit. When your browser has Do Not Track or Global Privacy Control switched on, we neither keep nor count your visit.
On your first visit to the app at app.irrigation-planner.com, when you have not chosen a language yet, our server looks up the country of your IP address in the same file (section 3.11). For an address in the United States, Canada or Mexico the app opens in English (USA): feet and psi, US parts and prices in US dollars. The app saves that language in your browser; a language you choose yourself always wins, and a saved design keeps its own region. The app hosts of other languages never ask. When you open the front page of irrigation-planner.com, our server looks up your country the same way and sends a visitor from the United States, Canada or Mexico to the US page (not search engines, and not when you came from the US page through the region switch's "UK/EU" link). Purpose: showing you the right units, parts and prices. The answer of these lookups is not stored and not cached; the page view itself is in the visitor statistics (section 3.11).
In the terms of the California Consumer Privacy Act (CCPA), as amended by the CPRA, in the last 12 months:
| Category | What | Source | Disclosed to (for a business purpose) |
|---|---|---|---|
| Identifiers | E-mail address, account number, IP address | You; your browser | E-mail provider (e-mail address). Mollie collects your payment details itself, on its own page. |
| Commercial information | Licenses bought, payments, amounts | You; Mollie | Mollie (amount and a payment number) |
| Internet or other electronic network activity | Server log, sessions, free-time counter, export log, planner records, visitor statistics (pages viewed, referrer, browser, screen size) | Your use of Rainplot | Nobody |
| Geolocation data | The point and address of your design and license (you choose them on the map); your country, derived from your IP address (sections 3.11 and 3.12) | You | Map and address services receive the map area or search text, without your identity (section 3.9) |
| Sensory information | Drawings or photos you import into a project | You | Nobody |
| Account login | E-mail address with password (stored as a hash) | You | Nobody |
The precise location of your design may count as "sensitive personal information". We use it only to provide the service you asked for, and not to infer anything about you, so we offer no separate "limit the use" option. We collect no other categories, such as biometric, financial account or health data. Retention periods are in section 3.
We do not sell or share personal information as those terms are defined in the CCPA, and we have no actual knowledge of selling or sharing personal information of anyone under 16. Because we do not sell or share, there is no "Do Not Sell or Share My Personal Information" link: there is nothing to opt out of.
The CCPA and the privacy laws of other states (such as Virginia, Colorado, Connecticut, Utah, Texas, Oregon and others) give rights to residents of those states. These laws apply to businesses above certain size thresholds, which we may not meet. We give every user the following rights anyway:
We answer within 45 days. We may ask you to show that the account is yours, usually by replying from its e-mail address. We take no decisions about you based solely on automated processing that have legal or similarly significant effects; limits such as the free time are technical limits from the terms.
Rainplot is run from the Netherlands. When you use it, your data travels to and is stored on our server in the Netherlands, where the GDPR protects it. Our processors are in the European Economic Area. Only a search text or map area goes to services in the United Kingdom and the United States (section 3.9).
We make a backup every night. Deleted data therefore stays in backups for at most 5 weeks. After that it is gone.
Both cookies are strictly necessary for the service. We use no other cookies, no third-party cookies and no tracking technologies. We do not track you across websites. When your browser sends Do Not Track or Global Privacy Control, we neither keep nor count your visits (section 3.11).
Your browser also keeps data itself (local storage and IndexedDB): your draft design, settings, your language and imported drawings. They stay on your device. You can clear them in your browser's settings.
Rainplot is for people of 18 and older. We do not knowingly collect personal information from children under 13 (or anyone under 18). If you think a child gave us data, e-mail us and we delete it.
If something still goes wrong with your data (a data breach), we tell you as the law of your state requires, and the Dutch Data Protection Authority as the GDPR requires.
We may change this notice. Every version has a number and a date; this version took effect on October 25, 2026. For important changes we e-mail everyone with an account beforehand. Questions or requests: info@rainplot.com.