My Harvest List ("we," "us," or "our") operates myharvestlist.com (the "Platform"), an independent, self-service travel-planning software platform for Woodinville wine country. We value your privacy and believe in minimizing data collection. Because you do not need to create an account to use our consumer planning tools, our data practices are designed to be straightforward, transparent, and non-invasive.
01Information We Collect
Because we do not require consumer accounts, user logins, or profiles, the information we collect depends on how you interact with the Platform.
A. General Visitors (Consumers)
If you use the Platform to browse venues, pluck items into a basket, or build itineraries, we do not collect your name, email address, phone number, or physical address. We only collect:
- Itinerary and Basket Data: The venues you add to your trip basket are stored locally in your own browser using standard browser localStorage. This data stays on your device unless you choose to generate a shareable trip link. Shareable links encode your selected venues directly into the URL string — while these URLs are processed by our servers to serve the page, they are never linked to user accounts or personal profiles.
- Log and Device Data: Standard web-server logs including your Internet Protocol (IP) address, browser type, operating system, referring URLs, device type, and pages viewed.
B. Paid Partners (Businesses)
If you submit a listing or purchase a paid participation level through our self-service onboarding tools, we collect:
- Business Contact Information: Your name, business email address, phone number, and venue address.
- Billing and Transaction Information: Payment is processed directly by Stripe, Inc. We collect transaction records (such as the last four digits of your card, expiration date, and billing history) but never store full card numbers or raw bank details on our servers.
C. Correspondence Data
If you contact us at info@myharvestlist.com, we collect your email address, name, and any information you include in your message.
02How We Use Your Information
We use collected information solely to:
- Provide, operate, and improve the Platform's core features, user flows, and routing maps;
- Process partner submissions through automated onboarding, manage participation levels, and send billing receipts;
- Respond to support requests and inquiries;
- Monitor anonymous usage trends to improve performance, district groupings, and visual layouts;
- Detect and prevent fraudulent activity, unauthorized scraping, or infrastructure disruptions.
03Third-Party Services & Data Sharing
We do not sell, rent, or trade your data to third-party marketers. We only share information with the following trusted service providers:
- Stripe, Inc. (Payment Processing): All financial transactions are processed securely by Stripe. Payment details are collected directly by Stripe via their secure embedded checkout. Their use of your data is governed by the Stripe Privacy Policy at stripe.com/privacy. We do not have access to your full card numbers, CVVs, or bank credentials.
- Google Analytics (GA4): We use Google Analytics to collect anonymous, aggregated traffic data — page views, popular venue profiles, and general usage patterns. This data is anonymized and does not identify you personally. Google's data practices are governed by the Google Privacy Policy at policies.google.com/privacy.
- Cloudinary, Inc. (Media Hosting): Venue photos and other listing media are hosted by Cloudinary. Cloudinary processes only the media files businesses submit and does not receive consumer personal information.
- Legal Disclosures: We may disclose your information if required by law, court order, or subpoena, or to protect our intellectual property rights or the safety of our users.
04Cookies, Local Storage & Tracking
- Browser Local Storage: We use your browser's localStorage to remember which venues you have plucked into your active trip basket. This data stays entirely on your device and is not transmitted to a central user database.
- Shareable Trip Links: When you generate a shareable trip link, your selected venues are encoded directly into the unique URL string. No personal data or user identity is attached to these links.
- Analytics Cookies: Google Analytics (GA4) utilizes cookies to analyze aggregate visitor traffic. We have enabled IP anonymization in Google Analytics so that your full IP address is never stored by Google in connection with your visit. You can opt out of Google Analytics tracking entirely by installing the opt-out browser add-on at tools.google.com/dlpage/gaoptout.
05Data Security
We implement commercially reasonable technical and organizational security measures to protect business contact data submitted by paid partners. However, no method of transmission over the internet or method of electronic storage is 100% secure, and we cannot guarantee absolute security.
06Age Restrictions & Privacy
The Platform is intended exclusively for visitors of legal drinking age (21+) and is not intended for or directed to minors. We do not knowingly collect or solicit personal information from anyone under the age of 21. If we discover that any personal data from a minor has been inadvertently submitted to us, we will delete it promptly from our systems.
07Governing Law & Updates
This Privacy Policy is governed by and construed in accordance with the laws of the State of Washington, without regard to its conflict-of-laws principles. We may update this policy periodically to reflect operational changes. Updates are reflected by the "Last Updated" date at the top of this document.
08Planning Behavior Data
In addition to the data types described in Section 01, the Platform generates and processes a category of information referred to in this Policy as "Planning Behavior Data." Planning Behavior Data is created as a byproduct of anonymous consumer interactions with the Platform's itinerary-building and venue-discovery features and includes, without limitation:
- Venue saves: the act of adding a venue to a trip basket or itinerary, recorded at the aggregate level;
- Trip creation: the initiation of a new trip basket or itinerary session;
- Itinerary composition: the overall structure and venue combination of a trip basket, analyzed in aggregate and anonymized form;
- Venue pairings: venues that are saved together within a single trip basket, analyzed at the aggregate level;
- District movement: aggregate patterns indicating which geographic districts or venue clusters tend to be combined in a single trip plan;
- Route sequencing: the order in which venues are added to or arranged within a trip basket, analyzed in aggregate;
- Trip sharing behavior: aggregate data regarding the generation and distribution of shareable trip links, excluding any personal identifiers.
Planning Behavior Data is collected and processed only in anonymized and aggregated form. It does not contain, and is not linked to, any personally identifiable information, individual consumer account, or individual device identity.
09Planning Intelligence
My Harvest List may aggregate, anonymize, de-identify, analyze, model, benchmark, display, and commercialize Planning Behavior Data to generate insights, trend reports, venue-performance indicators, owner-dashboard analytics, and related outputs (collectively, "Planning Intelligence"). Planning Intelligence contains no personally identifiable information and is derived exclusively from anonymized aggregate planning activity across the Platform's consumer user base.
Planning Intelligence may be used by My Harvest List for internal product development, Platform improvement, editorial curation, and commercial reporting purposes, including providing aggregated trend data to participating venue partners through the automated owner dashboard, as described in Section 10.
Planning Intelligence, Planning Behavior Data, venue-pairing analytics, district-transition analytics, route-composition analytics, and related derivative analytical outputs constitute proprietary platform information owned by My Harvest List, consistent with Section 06.3 of our Terms of Service.
10Aggregated Reporting
My Harvest List may provide aggregated and anonymized planning trend reports to participating venue partners — including through the automated owner dashboard — and, where applicable, to destination marketing organizations or enterprise licensees operating under a separate written agreement. Such reports may include, by way of example and not limitation:
- popular venues and frequently saved destinations within a given period;
- common venue pairings — destinations that are frequently saved together within a single trip basket;
- district and geographic area planning trends;
- route and sequencing patterns observed in aggregate trip compositions;
- seasonal and temporal planning behavior trends.
All aggregated reports provided to third parties are anonymized and de-identified prior to disclosure. No individual consumer identities, device identifiers, or personal information may be disclosed through aggregated reporting. Aggregated reports constitute Planning Intelligence as defined in Section 09 and remain the proprietary information of My Harvest List. Access to dashboard-based reporting does not itself guarantee any particular business outcome; see Section 08 of our Terms of Service.
11Washington Consumer Rights
To the extent applicable under Washington State law, consumers may have certain rights with respect to personal information that My Harvest List holds about them. Because the Platform is designed to be accountless and does not collect personal information from general consumers in the ordinary course of use, the practical scope of these rights is limited for most Platform visitors. Where applicable, consumers may submit requests to:
- Access: request confirmation of whether My Harvest List holds personal information about you and, if so, request a copy of that information;
- Correction: request correction of inaccurate personal information held by My Harvest List;
- Deletion: request deletion of personal information held by My Harvest List, subject to applicable legal retention obligations.
Requests may be submitted by email to info@myharvestlist.com with the subject line "Washington Consumer Rights Request." We will respond within a reasonable time and in accordance with applicable law. We may require reasonable verification of identity before processing a request. Please note that the trip basket and itinerary data described in Sections 01 and 04 are stored locally on your device and are not held by My Harvest List; such data can be deleted at any time by clearing your browser's local storage.
12Contact
For questions about this Privacy Policy or how your data is handled, contact us at:
- Email: info@myharvestlist.com
- Website: myharvestlist.com
This disclosure is provided for transparency and does not constitute formal legal advice. We recommend review by qualified Washington counsel before relying on it for regulatory compliance.