Skip to content
ForestMatters, LLC

Privacy Policy

We collect as little as possible. We never sell your data.

Last updated: March 7, 2026

Short version: we collect only what we need to run your subscription and plant trees. We never sell your data.

The detailed version is below.

ForestMatters, LLC ("ForestMatters," "we," "us," or "our") operates the website forestmatters.com. This Privacy Policy describes how we collect, use, and share information when you visit our website or use our services.

Information We Collect

Account Information

When you sign up for a ForestMatters subscription, we collect your business name, email address, industry, and location. This information is provided by you during signup and is used to manage your account, display your listing in the partner directory (if applicable), and communicate with you about your subscription.

Billing Information

Payment processing is handled by Stripe, Inc. ForestMatters does not store credit card numbers, bank account details, or other payment credentials. Stripe collects and processes your billing information directly. For details, see Stripe's privacy policy.

Authentication Data

We use NextAuth.js for authentication. When you sign in with Google OAuth, we receive your email address and display name from Google. When you sign in with a magic link, we use the email address you provide. Authentication tokens are stored securely and used only to maintain your session.

Usage Data

We collect basic usage data about your interactions with the ForestMatters dashboard, including pages visited, badge downloads, and planting history views. This data helps us improve the service.

Analytics Data

With your consent, we use Google Analytics (GA4) to collect anonymized usage data on our public pages, including pages visited, time on site, device type, and approximate location (country/region level). We do not collect personally identifiable information through analytics.

API Request Logs

We log API requests to monitor service health and prevent abuse. These logs include a hashed (non-reversible) version of your IP address, request path, HTTP method, response status, and a truncated browser identifier. Logs are retained for 90 days and then automatically purged.

Cookies

We use cookies for essential site functionality and, with your consent, for analytics. You can manage your cookie preferences at any time through the cookie consent banner.

  • Essential cookies: Required for authentication and site functionality. These cannot be disabled.
  • Analytics cookies: Help us understand how visitors use the site. Only active with your consent.

Third Parties

We share data with the following third parties as needed to operate the service:

  • Stripe: Payment processing for subscriptions
  • Google (OAuth): Authentication (when you choose to sign in with Google)
  • Resend: Transactional email delivery (magic links, subscription confirmations)
  • Vercel Web Analytics: Cookie-free, anonymized page view counts provided by our hosting platform
  • First-party analytics (Supabase): With your consent, we collect page visits, referrer URLs, UTM campaign parameters, screen width, device type, and a random visitor identifier. This data is stored in our own database, not shared with third parties, and is only collected when you accept analytics cookies.
  • Google Analytics: Site analytics with cookies (with your consent via the cookie banner)
  • Ahrefs: SEO analytics (with your consent via the cookie banner)
  • Cloudflare: DNS, security, and performance services
  • Supabase: Database hosting for analytics data and file storage for logos, certificates, and social media assets
  • Upstash (Vercel KV): Key-value storage for business profiles, planting records, and session data
  • Ecologi / Digital Humani: Tree planting fulfillment (we share only the minimum data needed to process planting orders)

Partner Directory

Grove and Forest tier subscribers are listed in the public partner directory. By subscribing to a directory-eligible tier, you consent to the public display of:

  • Your business name
  • Your industry
  • Your general location (city and state)
  • Your subscription tier

We do not display your email address, billing details, or any other account information in the directory.

You may opt out of the directory at any time by contacting hello@forestmatters.com. Opting out removes your listing but does not affect your subscription or other benefits. If you cancel your subscription, your directory listing is removed automatically within 24 hours.

We Do Not Sell Your Data

ForestMatters, LLC does not sell, rent, or trade your personal information or business data to third parties.

Your Rights

CCPA (California)

California residents have the right to know what personal information we collect, request deletion of their data, and opt out of the sale of personal information. We do not sell personal information. To request deletion, use the dashboard or email us at hello@forestmatters.com.

OCPA (Oregon)

Oregon residents may have additional rights under the Oregon Consumer Privacy Act (OCPA), including the right to access, delete, and correct personal data, and to opt out of targeted advertising. ForestMatters does not engage in targeted advertising or sell personal data. To exercise your rights, email us at hello@forestmatters.com.

GDPR (European Union)

EU residents have the following rights under GDPR: (1) access your personal data, (2) rectify inaccurate data, (3) request erasure of your data, (4) restrict processing of your data, (5) data portability (receive your data in a structured, machine-readable format), and (6) object to processing of your data. You may also withdraw consent for data processing at any time. To exercise any of these rights, use the dashboard or email us at hello@forestmatters.com.

Data Retention

Active Subscribers

Your account data (business name, email, industry, location) is retained for the duration of your subscription and is used to manage your account, display your directory listing, and communicate with you about your subscription.

After Cancellation

When you cancel, your account data is retained to allow for resubscription. You may request immediate deletion at any time (see below). Anonymized planting records are retained indefinitely for aggregate impact reporting.

Anonymized Data

Tree planting records (date, tree count, provider) are retained indefinitely in anonymized form for aggregate impact reporting. After account deletion, these records cannot be linked back to your business. This is consistent with GDPR principles: anonymized data is no longer personal data.

Data Requests and Deletion

You can exercise your data rights in two ways:

  1. Self-service: Use the 'Delete Account' feature in your dashboard to schedule deletion of your account data and cancel your subscription. Deletion is finalized after a 30-day recovery window, during which you can cancel the request by signing back in.
  2. Email: Contact hello@forestmatters.com with the subject line "Data Request" for data exports, corrections, or deletion. We aim to respond within 30 days.

Data portability: You may request a copy of your data (business profile, planting history) in a structured, machine-readable format (JSON) by emailing hello@forestmatters.com with the subject line "Data Export."

Upon deletion, your business name, email, industry, and location are permanently removed. Your directory listing is removed. Anonymized planting records are retained for aggregate reporting.

International Data Transfers

ForestMatters is based in the United States. Some of our service providers operate outside the US. In particular, Ecologi (our primary reforestation partner) is based in the United Kingdom. When we share data with international partners, we rely on our service providers' data processing agreements and transfer mechanisms to help protect your data during international transfers.

Children's Privacy

ForestMatters is a business-to-business service and is not directed at individuals under the age of 13. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us at hello@forestmatters.com and we will promptly delete it.

Data Controller

ForestMatters, LLC is the data controller for your personal data. ForestMatters, LLC is registered in the State of Oregon, United States. For data protection inquiries, contact us at hello@forestmatters.com.

Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last updated" date. For active subscribers, material changes will be communicated via email.