Privacy
How we keep your data
Who is responsible
mazraa.app is the page of Mazraa, an app that keeps a farm’s books, in its pilot and run privately. For anything about your data, write to hello@mazraa.app.
What this page collects by itself
Nothing about you. It sets no cookies, keeps nothing in your browser, runs no analytics or tracking, and loads no fonts, scripts or pictures from other sites, but for Cloudflare’s check on the Ask to join form, below.
Our server’s log
Like any web server, ours notes each request: your IP address, the time, the page asked for and what your browser says it is. We keep this to keep the page working and safe, and delete it after 14 days. Legal basis: our legitimate interest in a secure site (Art. 6(1)(f) GDPR). The server is DigitalOcean’s, in Frankfurt.
When you ask to join or write to us
When you send the Ask to join form or email hello@mazraa.app, we use what you send (your name, email address, phone number if you give one, your country and town, what you grow, and your message) only to answer you and, if you ask, to open your farm’s account in the pilot. The form’s request comes to our mailbox as an email, and our server keeps no copy of it. Legal basis: steps you asked for before an agreement (Art. 6(1)(b) GDPR). We keep it until your question is settled, and at most 12 months unless your farm joins.
Once you start typing in the Ask to join form, it loads Cloudflare Turnstile from challenges.cloudflare.com, which tells a person from a script that would fill our inbox; the app’s sign-up page loads it too, against scripts making farms. Turnstile reads your IP address, what your browser says it is and how it behaves, never what you type in the form, and tells us only whether the check passed. Legal basis: our legitimate interest in keeping the forms from being misused (Art. 6(1)(f) GDPR). Cloudflare does this for us, and uses the same signals to improve its detection of scripts on its own account, as its Turnstile privacy addendum says.
A note sent from the app’s Help & feedback comes to the same mailbox the same way: your words, the address you give us to answer, your name and farm, the app’s page it was sent from, the app’s version, what your browser says it is, and a photo if you add one. A copy goes to your account’s email address, and our server keeps none of it. Legal basis: our agreement to keep your farm’s books (Art. 6(1)(b) GDPR). We keep it until your note is settled, and at most 12 months.
Who else handles it
| Service | What it does for us | Where |
|---|---|---|
| DigitalOcean | The server this page runs on | Frankfurt, Germany |
| Cloudflare | The domain’s address book (DNS), forwarding mail to hello@mazraa.app, and the check on the Ask to join form and the sign-up page | EU and worldwide |
| Google (Gmail) | The mailbox our mail is read in | EU and US |
| Resend | Sending our replies, and the Ask to join form’s requests and the app’s notes to our mailbox | EU |
DigitalOcean, Cloudflare and Resend work for us under a data processing agreement. Where a company is American, the transfer rests on the EU-US Data Privacy Framework or the EU’s standard contractual clauses.
Your rights
You may ask what we hold about you, and have it corrected, deleted or handed to you, and object to or limit its use: write to hello@mazraa.app. You may also complain to a data protection authority, in Germany or where you live.
We change this page when what we do changes. Last changed: 5 November 2026.