Privacy

useflower.dev is a static website. It has no accounts, it sets no cookies, and one small script from another site counts the page views. The one thing it keeps about anyone is the waitlist, if you join it. This page covers polystrate.dev too: one static page with no form of its own, which counts visits with Fathom in the same cookieless way. Its waitlist link leads to the form on this site.

What the site stores

Nothing, unless you join the waitlist (below). The site sets no cookies, keeps no settings of its own, runs no advertising, and doesn’t fingerprint your browser. It shows the light or the dark theme your system asks for, which your browser and operating system keep to themselves; the site never learns it.

Page views

We count visits with Fathom Analytics, a cookieless analytics service, so we know which pages people read. It sets no cookies, collects no personal data and doesn’t follow anyone from one site to another, which is why there’s no consent banner to click. All we see is how many people read each page, never who. Fathom’s own privacy policy explains what it does with a visit; the script counts useflower.dev only, so previews and local copies of the site aren’t counted.

The waitlist

If you join the waitlist, we store:

• your email address, so we can write to you about early access to flower and polystrate, and for nothing else;
• when you joined, the page you joined from, and which version of the form’s consent text you were shown, so we know what you agreed to;
• whether you ticked the form’s optional box saying you want to build your own thing on polystrate, the tools flower is built on, kept with the page you joined from (a link from polystrate.dev arrives with that box already ticked, and then the page you joined from says so);
• a hash of your IP address, used only to limit how many tries one network can make. It’s made with a random salt that changes every day, so it can’t be turned back into your address. Old records are cleared when the form is next used: then each try older than ten minutes is deleted, and so is any earlier day’s salt, after which its hashes can’t be matched to anything. On a quiet day they can stay until that next use.

The form uses Cloudflare Turnstile to check that a person is signing up, not a bot. It runs on the waitlist page only, by itself, and asks for a click only when it has to; Cloudflare’s Turnstile privacy addendum says what it looks at.

Each new signup also sends the site owner one email, so a person joining is noticed: it says an address joined, which page it joined from, when, and how many people are on the list now. It names your address, and never your IP address.

The list is kept in a Cloudflare database. We keep your address until early access has a place for you, or until you ask us to remove it: email hello@useflower.dev from that address and we’ll delete it. We don’t share the list, sell it or use it for advertising.

The meadow

The meadow, the picture of flower’s builds on the site’s home page and meadow page, reads one public file from this site, the same anonymous file for everyone, every few minutes while it’s on screen, and keeps a connection open to this site that sends it each change to the meadow as it happens, the same for everyone. Neither sends anything about you beyond what any page request does (below). While the connection is open, the site keeps a hash of your IP address with it, made with a random key, only to limit how many connections one network can open; it can’t be turned back into your address, and it goes when the connection closes. The meadow keeps nothing once you leave.

What the host sees

The site is served by Cloudflare. Like any web server, it receives each request’s IP address, the page asked for and your browser’s user agent, and it uses them to deliver the page and protect the site from abuse. Cloudflare may set a strictly necessary security cookie to tell people from bots. We don’t use this data to build profiles or share it for advertising.

Links to other sites

The quote on the home page links to its original post on X. If you follow that link, X’s own privacy policy applies.

Changes and questions

If the site starts collecting anything else, this page will say what, why and for how long before it happens. Questions go to hello@useflower.dev.

Last updated 11 November 2026.