Privacy Policy

Scope

Yardware LLC, a Missouri limited liability company doing business as Yardware, operates Measure The Lawn and is responsible for the practices described here. This Policy covers anonymous measuring, Yardware Accounts, cloud projects, browser recovery, analytics, operational email, maps, basic hosted shares, and optional provider connections. The Service is intended for the United States. Account users must confirm they are at least 18 and located in the United States.

Information we collect

• Account information: email address; authentication, session, and verification records; profile and project-type selections; eligibility and policy acknowledgements; a separate optional marketing preference; provider-offer opt-out and suppression records with limited history; and limited deletion status. Some older Accounts may retain a legacy profile detail no longer accepted for new or edited profiles.
• Cloud projects: project name and optional note; measurement names and types; coordinate geometry, including cut-outs and distance endpoints; exclusions; property-feature marks you add, including their type, map location, and any custom name; and save, count, and timestamp information. Coordinates and geometry may reveal a physical property when linked to an Account.
• Browser recovery: the only full-workspace recovery record, which may include anonymous or Account-related geometry, viewport, interaction context, and temporary authentication or sharing handoffs.
• Maps and location: address or place searches, map requests, and location coordinates when you choose the browser location feature. Search text is not intentionally stored in cloud projects.
• Hosted shares: one selected measurement, its geometry and calculated dimensions, and a static map preview.
• Technical and analytics information: page views, allowlisted interactions, cookies or client identifiers, approximate location, browser and device information, IP address, user agent, request time, route, and response status.

Cloud-project snapshots do not contain address-search text, calculated material totals, selection, undo history, map tiles, or the device camera. Our analytics and general application logs are designed not to receive email, names, notes, addresses, exact coordinates, geometry, Account or project identifiers, tokens, query strings, URL fragments, or free text.

Sources and uses

We receive information from you, your browser or device, service providers, and calculations or metadata derived from your use. We use it to provide maps, measurements, browser recovery, Accounts, cloud saves, and hosted shares; authenticate users and protect sensitive actions; send operational email; maintain preferences; troubleshoot and improve reliability; prevent abuse; and comply with law.

The optional marketing-email preference is separate from the provider-offer opt-out. Changing one does not change the other. We do not use profile selections or project geometry for automated eligibility, credit, employment, insurance, or targeted-advertising decisions.

Account signup explains Provider connections and offers. Unless you opt out, if the program is activated, we may use limited information from your Yardware Account and Measure The Lawn projects to connect you with relevant providers, services, quotes, and offers. This program excludes precise location, measurement geometry, project notes, and other sensitive or free-text project content.

We may use and disclose information that has been aggregated or deidentified so it cannot reasonably identify you for lawful business purposes, including research, product planning, and reporting. We will not attempt to reidentify it except to test whether our deidentification measures work or as permitted by law.

Browser, cloud, and public shares

Browser recovery is separate from Account and cloud storage. It can preserve anonymous work and unsynced changes on that browser, but it is not guaranteed backup or cross-device synchronization. Cloud projects are associated with the verified Yardware Account.

A basic hosted share is public to anyone with its valid link and expires after three days. Recipients can forward the link, and the geometry or preview may identify a property. A share is not a whole project or a managed collaboration space.

Google Maps and Analytics

We use Google Analytics automatically to understand page use, tool interactions, and reliability. We do not display an analytics permission prompt. Our custom analytics exclude names, email addresses, account and project identifiers, addresses, exact measurements, and geometry.

Google provides Maps, Places, geocoding, Static Maps, and Google Analytics 4 (“GA4”). For map features, Google may process search terms, IP address, browser or device information, and latitude and longitude. Browser geolocation is used only when you choose it, and permission can be denied or revoked.

GA4 may use cookies or a client identifier and process page views, allowlisted interactions, approximate location, and browser and device information. Google receives information from many sites and apps that use its services and handles that information as described in its policies. Learn how Google uses information from sites and apps that use its services (opens in a new tab), review the Google Privacy Policy (opens in a new tab), or use Google’s Analytics opt-out browser add-on (opens in a new tab).

Use of Google Maps features is also subject to the Google Maps/Google Earth Additional Terms of Service (opens in a new tab).

How information is disclosed

We disclose information to service providers that support cloud hosting and databases, email delivery, maps and analytics, network security and rate limiting, and temporary share storage. They may process information only for the services they provide to us and under their own legal obligations.

We also disclose a selected measurement when you create a public-link share. We may disclose information to comply with law or valid legal process, protect rights and security, investigate abuse, or complete a financing, reorganization, merger, bankruptcy, or business transfer, with notice or safeguards where required.

If the Provider connections and offers program is activated and no user opt-out or other suppression applies, we may provide limited information from your Yardware Account and Measure The Lawn projects to service providers and business partners. They may contact you about relevant quotes, services, and offers, and Yardware may be paid for the connection.

Depending on applicable law, these disclosures may be considered a sale of personal information. We do not make disclosures through this program while a user opt-out or other suppression applies.

Retention

• PINs: ten minutes, single-use, rotated on resend, and disabled after five unsuccessful attempts.
• Sessions: up to 30 days and rolling while active. Authentication rate-limit records expire after their temporary protection windows.
• Accounts and cloud projects: Account and consent records remain while the Account exists; projects remain until project or Account deletion. An incomplete Account is eligible for cleanup after 30 days, not necessarily at an exact time.
• Browser recovery: until replaced, cleared or aged out, removed through the product or logout, or deleted through browser or device controls.
• Hosted shares: three days, unless removed earlier for security, abuse, legal, or operational reasons.
• Deletion and email records: a completed privacy-minimized deletion record may remain up to 30 days. An ordinary pending lifecycle-email record may remain up to seven days; a deletion-related email record may remain up to 30 days.
• Provider-offer records: opt-out, suppression, and any future disclosure evidence while reasonably necessary for legal, security, operational, privacy-request, and dispute purposes. These records are designed not to duplicate contact or project payloads.
• Analytics, logs, backups, and provider records: according to current configuration, security needs, and documented provider or backup schedules. Deletion from active systems does not mean immediate deletion from every backup or provider record.

Your choices and deletion

Account settings let you update profile selections and the optional marketing preference, delete a project, log out, or request Account deletion after email verification. Project and Account deletion flows provide a separate browser-data choice where applicable. If browser removal is not selected, cloud deletion does not itself clear IndexedDB. Existing hosted links remain available until their three-day expiration unless removed earlier.

Account Settings let you select Do not sell or share my information. This stops future provider-offer disclosures but cannot retrieve information already provided. Clearing a prior opt-out requires a separate confirmation. We may retain limited opt-out, suppression, and disclosure evidence as described above.

You can block or delete cookies through browser controls. Blocking the essential session cookie prevents Account features but not anonymous measuring. Cookie controls may not clear IndexedDB recovery.

You can use browser controls or Google’s Analytics opt-out browser add-on to limit analytics collection. The Service does not provide an analytics opt-in or opt-out setting. Account marketing and provider-offer preferences are separate from analytics. Some laws define “sale” or “sharing” broadly enough to include certain analytics disclosures even when no money changes hands.

Privacy rights

Depending on applicable law, you may have rights to access, know, correct, delete, or obtain a portable copy of personal information; opt out of sale, sharing, or targeted advertising; limit certain sensitive-information uses; appeal a denial; or use an authorized agent. Rights may be subject to verification and legal exceptions.

Send requests to hello@yardware.app. We may verify control of the Account email or session and request only information reasonably needed to match the request. Authorized agents may need to provide signed authority and consumer verification. The provider-offer opt-out is also available in Account Settings. If marketing email is activated later, it will include the required unsubscribe method; operational messages are separate.

Security, children, and processing

We use reasonable administrative, technical, and organizational safeguards, including short-lived hashed PINs, server-managed sessions, access controls, rate limits, and encryption of pending lifecycle-email destinations and payloads. No system is completely secure.

Accounts are limited to users who confirm they are at least 18 and in the United States. Anonymous measuring does not currently ask for age confirmation. The Service is not directed to children under 13, and we do not knowingly collect their personal information.

The Service is operated from the United States. Information may be processed in the United States or other locations where service providers operate, subject to applicable law and safeguards.

Changes and contact

We may update this Policy and will post the new date. For a material change, we will provide additional notice and request consent before applying a materially different practice to previously collected information when required by law.

Questions, rights requests, and privacy concerns may be sent to hello@yardware.app.