Legal

Cookie Policy

Last updated 27 August 2026. The short version: one cookie keeps staff logged in. The staff dashboard also uses local storage so we don't keep asking to install the app. No advertising or cross-site tracking.

This page explains the cookies and local storage RootTend uses. It applies to garden center staff logging into the dashboard and to the public customer-facing pages (registering a purchase, filing a claim). Public pages set neither a cookie nor local storage. For how we handle the information you enter, see our Privacy Policy.

The cookie we set

RootTend uses a single, first-party, signed session cookie to keep you logged in after you authenticate. It stores a session identifier — not your password or any customer data — and is set to be HttpOnly, Secure, and SameSite so it can't be read by page scripts or sent along with cross-site requests. It expires automatically or when you log out.

Local storage on the staff dashboard

After you are signed in, the dashboard may store two first-party values in the browser's local storage: whether you dismissed the "add to home screen" prompt, and how many times you have opened the dashboard (so we do not ask on the first visit). Neither is a cookie. Neither is sent to our servers. Neither follows you across other websites. Clearing site data in the browser forgets both, and the prompt may appear again. Public registration and claim pages do not use local storage.

What we don't use

No advertising cookies, no third-party analytics or tracking pixels, and no cookies that follow you across other websites. Because the only cookie we set is strictly necessary to keep you logged in, we don't show a cookie-consent banner — under most cookie laws, strictly-necessary cookies like a session cookie don't require separate consent, only disclosure, which is what this page is.

Controlling cookies

You can block or delete cookies through your browser's settings. Since RootTend's session cookie is what keeps you logged in, blocking it will log you out and require signing in again on each visit — the public registration and claim pages don't require a login, so they'll keep working either way.

Changes to this policy

If this policy changes in a material way — for example, if we add analytics in the future — we'll update this page and the date above.

Contact us

Questions about this policy can go to support@roottend.com.

Before this goes live: this reflects what RootTend actually sets today, but cookie-disclosure requirements vary by jurisdiction (e.g. GDPR/ePrivacy in the EU, UK PECR). Worth a quick legal check that "disclosure only, no banner" is still correct once you know which regions your garden centers and their customers are actually in.