Privacy Policy

What we collect when you register

When you register a scarecrow, we collect your name, email address, postal address, phone number (if provided), scarecrow name, description, and where it will be displayed. You may also drop a map pin and upload a photo. This information is needed to run the competition.

What's shown publicly

On the trail map and voting pages, we show your scarecrow's name, photo, display location (e.g. "front garden"), and map pin so visitors can find and vote for scarecrows. Your personal name, address, email, and phone number are never shown publicly. Only the competition organiser can see those details.

Address lookup

When you type your address on the registration form, it may be sent to OpenStreetMap's Nominatim service to find the location on the map. This is an external service — see their documentation. No personal data beyond the address text is shared.

Voting

When you vote, we store a random device identifier (generated by your browser and saved in local storage) and a one-way hash of your IP address. These are used to prevent duplicate voting — we do not collect your name or any other personal information when you vote. The IP hash cannot be reversed back to your actual IP address.

Trail route planning

If you use the route planner on the trail map, scarecrow locations (and your location if you share it) are sent to the OSRM routing service to calculate walking routes. No personal data beyond coordinates is shared.

Data stored on your device

This site uses your browser's local storage (not cookies) to remember:

— Which scarecrows you've ticked off on the trail

— Your voting device identifier

No tracking cookies or third-party analytics are used. The organiser dashboard uses a session cookie for authentication only.

Email

After registering, we send you an email with a link to upload your scarecrow photo. Emails are sent via Resend, a third-party email service. Your email address is shared with Resend solely for this purpose and is not used for marketing.

How long we keep it

Competition data (entries, photos, votes) is retained for the duration of the competition and a reasonable period afterwards for results and record-keeping, then deleted.

Who has access

Your data is stored securely on Cloudflare's infrastructure (D1 database and R2 storage). Only the competition organiser has access to the admin dashboard with full entry details including personal contact information. No data is shared with or sold to third parties.

Your rights

You can request to see, correct, or delete your entry data at any time by emailing [email protected].

Contact

For any questions about this policy or your data, email [email protected].

Last updated: June 2026