Landrace.Wiki:Privacy policy

This Privacy Policy explains what information Landrace.wiki collects, why, and what rights you have over it. It applies to landrace.wiki and to the MediaWiki software that runs it. It does not apply to external sites linked from our pages, which have their own policies.

Landrace.wiki is operated by the operators of Landrace.wiki ("we", "us") as the data controller under the UK General Data Protection Regulation and the EU General Data Protection Regulation.

Summary

You can read the wiki without an account. We do not run any client-side analytics, advertising, or cross-site tracking.
Every request to the site passes through Cloudflare, which protects it against attacks. Cloudflare sees your IP address and the details of each request. It may ask your browser to pass a short automatic check, which sets a security cookie.
If you create an account or edit pages, we keep a permanent public record of your edits linked to your username, or to your IP address if you are not logged in. This is how wikis work and cannot be retroactively undone.
We use hCaptcha to block spam, which sets a small number of technical cookies.
We use Brevo to send account-related emails such as password resets. No marketing.
GPS coordinates associated with accessions are deliberately obfuscated by approximately 500 m to protect farmers. Precise coordinates are never published.

What we collect

When you read the wiki

Our web server records standard technical information for every request: IP address, timestamp, page accessed, browser user agent, and referring page. This is logged by the hosting provider's server software and used for security, debugging, and abuse prevention.

Every request to landrace.wiki first reaches Cloudflare, a network security service that keeps the site available and filters out attack traffic. Cloudflare processes the information sent with each request: your IP address, the page requested, the time, your browser's user agent and the other request headers. It passes legitimate requests on to our server. Cloudflare acts as our data processor under its Data Processing Addendum; the Cloudflare Privacy Policy describes its own practices.

Cloudflare may ask your browser to pass a short automatic check before a request reaches the site, for example while the site is under attack. The check page runs a script from Cloudflare that tests technical features of your browser to tell people from automated traffic. The check does not ask for personal details.

For each request it challenges or blocks, Cloudflare logs a security event: the IP address, the network and country it comes from, the browser's user agent and the page requested. The site's operators can see these events in Cloudflare's dashboard and download recent ones to investigate an attack. Cloudflare keeps them for up to 31 days.

We do not run Google Analytics, Matomo, Plausible, Cloudflare Web Analytics or any comparable client-side analytics. No tracking scripts are loaded.

When you create an account

Account registration requires a username and password. An email address is optional. If you provide one, it is used only to send password resets and notifications you have explicitly opted into, and to let other logged-in users contact you via the wiki's email function if you enable that feature.

If you do not wish to tie an account to your real identity, you are free to choose a pseudonymous username and omit the email address.

When you edit pages

Every edit is recorded permanently in the page history and is publicly visible. The record includes:

the username of the editor, or the editor's IP address if they are not logged in
the timestamp
the full text of the change
any edit summary supplied

This public edit history is inherent to how a wiki operates. It cannot be retroactively removed except in narrow cases such as accidental disclosure of personal data, a court order, or a clear legal requirement. If you do not want your IP address associated with an edit, log in first.

Cookies

We set the minimum cookies necessary for the wiki to function:

Session cookies when you log in, to keep you logged in.
Preference cookies if you change your display preferences.
hCaptcha cookies on pages where hCaptcha is used to prevent spam. See the hCaptcha Privacy Policy for their specific practices.
Cloudflare security cookies when your browser passes Cloudflare's check. The cookie cf_clearance shows that the check was passed and spares you a new check on every page. It lasts 30 minutes. While the check runs, Cloudflare may also set cookies whose names begin with cf_chl, which it uses to detect faults in the check itself. See Cloudflare's list of cookies.

We do not set advertising or tracking cookies.

Email

We use Brevo (based in France, acting as our data processor under a Data Processing Agreement) to send transactional emails such as password resets and watchlist notifications. Brevo processes the minimum data required to deliver these messages. We do not send marketing email.

Sensitive data: farmer safety

Landrace.wiki documents landrace cannabis populations in regions where cultivation is often illegal and where farmers face real risk of enforcement action, violence, or loss of livelihood. We take the following precautions:

GPS coordinates stored on accession pages and published on maps are deliberately obfuscated by approximately 500 m. Precise coordinates are never published.
We do not publish farmers' personal names, contact details, household locations, or identifying photographs, unless the farmer or community has explicitly requested public attribution.
Access to raw field data is restricted and is not exposed via the public API, data dumps, or CSV export.
Obfuscated coordinates, administrative regions, growing areas, and other geographic metadata are public. They are accessible through wiki pages, the public API, and data exports. This is deliberate: the wiki's purpose is open documentation of these populations. If you are a farmer, collector, or contributor and wish to have specific information about your site removed or further obscured, contact us at privacy@landrace.wiki.

If you believe information on the wiki could identify a specific farmer or community and put them at risk, contact us and we will review and, where appropriate, redact.

Your rights

If you are in the UK, EU, or EEA, you have the following rights under the GDPR:

Access — request a copy of the personal data we hold about you.
Rectification — ask us to correct inaccurate data.
Erasure — ask us to delete your personal data. The public edit history cannot be deleted in full without breaking the integrity of the record. We will delete your account and associated email address on request, but edits will remain attributed to the username used at the time.
Restriction and objection — ask us to restrict or stop processing your data in specific circumstances.
Portability — request your data in a machine-readable format.
Complaint — complain to your national data protection authority. UK residents can contact the Information Commissioner's Office.

To exercise any of these rights, email the address below.

Retention

Server access logs: retained by the hosting provider according to their standard log rotation.
Request data handled by Cloudflare: kept by Cloudflare under its own privacy policy.
Cloudflare security events: up to 31 days. Copies downloaded to investigate an attack are kept only as long as the investigation needs them, then deleted.
Account data: retained while the account exists, deleted on request.
Edit history: retained indefinitely as part of the public record.
Email address: deleted when removed from your preferences or when your account is deleted.

International transfers

Our server is hosted by A2 Hosting in the United States. Brevo processes email in the European Union. If you are in the UK or EU, using this site involves transferring your data to the US under standard contractual clauses.

Every request also passes through Cloudflare, Inc., a US company. Cloudflare normally handles each request at one of its data centres close to you, which may be outside your country. Cloudflare is certified under the EU-U.S. Data Privacy Framework, its UK Extension and the Swiss-U.S. Data Privacy Framework. For other transfers it uses standard contractual clauses.

Children

Landrace.wiki is not directed at children. We do not knowingly collect data from anyone under 16. If you believe a child has created an account, contact us.

Changes to this policy

Material changes will be announced on the site at least 14 days before taking effect. If a change has to take effect at once to keep the site available or secure, it will be announced on the site as soon as possible, with the reason. The page history of this policy serves as the permanent change log.

7 October 2026. Since about 07:40 UTC on 7 October 2026, every request to landrace.wiki passes through Cloudflare. The switch was made at short notice to bring the site back after a denial-of-service attack made it unreachable. It therefore took effect without the 14 days' notice described above. The sections on reading the wiki, cookies, retention and international transfers now describe what Cloudflare does.

Contact

For privacy questions, data access requests, or concerns about content on the wiki:

privacy@landrace.wiki

Last updated: 7 October 2026