Privacy Policy

Last updated: October 2, 2026.

This policy covers hometownfieldguides.com: buying a guide, getting your download, emailing us, and reading the pages on this site. It does not cover gardenwithlilly.com, which has its own privacy policy.

Who we are

Supertrained Inc., a Florida corporation, runs this site and sells the guides. Hometown Field Guides and Garden with Lilly are names that Supertrained Inc. uses.

Supertrained Inc. 7901 4th St N STE 300 St Petersburg, FL 33702 United States

Privacy questions and requests: hello@hometownfieldguides.com. We have not appointed a data protection officer.

Who this site is for

This site and its guides are written for adults. You must be 18 or older to buy a guide. Some pages and printables are made for a grown-up to use with a child, but we ask adults only for their own details. We don’t ask for a child’s name, age, school, photo, or anything else that identifies a child. See “Children” below.

What we collect

We collect personal information in only these ways.

Buying a guide. Stripe runs checkout on its own site. It asks for your email address, your card details, the name on the card and your full billing address; the address is required. We never see or store your full card number. Stripe uses your billing address to work out whether sales tax applies, and checkout shows any tax before you pay. After you pay, Stripe tells us your email address, your name, your billing address, which guide you bought, the price, any sales tax and the date. We use these to send your guide, work out and record sales tax, keep sales records, and handle refunds and disputes. Stripe keeps the full address; our site reads your name and your ZIP code, city, state and country from it. Stripe also uses payment details for its own purposes, such as preventing fraud and meeting its legal duties, under its privacy policy at stripe.com/privacy. If advertising was allowed in your browser at checkout, we also use your name and address for the advertising matching described in “Purchases” under “Cookies and tracking”.

Getting a new download link. If you use the form on our “Lost download link” page, you type an email address. We use it only to look up your order in Stripe and, if there is one, to email new links to that address. If the lookup or the email fails, we pass the address (and the order number, if we found one) to a person at our company, so they can send the link by hand.

The optional question after you buy. On the thank-you page, we ask one optional, open-ended question. If you answer, your answer is emailed to our company inbox together with your order number, so it is tied to your order. Please don’t include anything about a child, or any health or other sensitive information.

Emailing us. Email sent to hello@hometownfieldguides.com is received by AgentMail, an email service. An automated assistant (an AI) reads it and may draft or send the reply. A person at Supertrained Inc. oversees the assistant and gets copies of the emails. We keep the emails so we can answer you and keep a record of what we agreed, including refund requests. Please don’t send anything about a child, or health or other sensitive details.

This inbox is not for emergencies. For a suspected poisoning or sting, call Poison Help at 1-800-222-1222. In an emergency, call 911.

Website logs. Vercel, our hosting provider, keeps technical records of visits so it can run and secure the site. If something goes wrong on our server, an error report goes to Sentry, an error-monitoring service; our server removes email addresses, download links, order references and cookies from it first, and it carries no identity data. These include things like your IP address, your browser type, the address of the page you asked for, and the time. They also show when a download link is used. We use these records to keep the site working, fix problems and spot abuse, such as a download link being shared. We don’t use them to build a profile of you.

The finder. If you type a ZIP code (or the first part of a Canadian postal code) into the finder, we use it to find your county and show what monarchs do there. We don’t link it to your name or email address. The code appears in the address of the results page, so it can end up in your browser history and in our host’s logs. We take it out of the address before any analytics or advertising tool loads, and we tell your browser not to pass that address on to the next page. Google Analytics is also given a cleaned version of the page you came from. The code still shows on the results page, and in the box while you type it, so the tools in “Cookies and tracking” can read it there: Microsoft Clarity can record it as page text, the automatic matching described there can pick it up, and Meta’s and TikTok’s page-detail features can read the results page’s text.

Analytics and advertising tools. When they are allowed to run (see “Cookies and tracking”), the tools listed there collect information about your visit: the pages you look at here and when, the page you came from, your device and browser, your IP address, and identifiers stored in cookies. They also record a few steps: looking at a guide’s page and starting checkout. Google Analytics also records a purchase, in the browser you checked out in (which guide, the price, and an order reference that is not your name or email address). If you buy with advertising allowed in your browser, Google Analytics also receives your contact details from checkout with that purchase, hashed where Google’s format allows, and our server tells Meta and TikTok about the purchase (see “Purchases” under “Cookies and tracking”). With advertising allowed, the tools also look for contact details on our pages, and Meta and TikTok collect more detail about the pages and your clicks (see “Automatic matching and page details”). Microsoft Clarity also records clicks, scrolling, mouse movement and the text our pages show, with what you type hidden.

Cookies and tracking

We use analytics and advertising tools from Google, Microsoft, Meta and TikTok. They set cookies and collect the information described in “What we collect”: identifiers (cookie identifiers, your IP address, and, with advertising allowed, one-way hashes of contact details: your email address and the name, ZIP code, city, state and country from checkout, and contact details the tools find on our pages), approximate location (the companies can work it out from your IP address; Google also receives the ZIP code and country from checkout as they are), commercial information (which guide you looked at, started to buy or bought, and its price), internet activity (the pages you visit here, the page you came from, your clicks, and, for Meta and TikTok, details of the pages and how long you spend on them), inferences (with advertising allowed, the age range, gender and interests Google estimates through Google signals, which we see only as totals in reports), and device and browser details.

Where you are decides the starting point. We decide it from the location our host sees for your connection. A VPN can put you in the wrong group.

• In the United States, including its territories, and whenever we can’t tell where you are, the tools stay off until you choose “Accept all”, or turn them on under “Choose”. “Reject all” is the same kind of button as “Accept all”. You can buy without agreeing. We ask again a year after you agree.
• Outside the United States, none of these tools runs at all.

Without JavaScript, none of them runs.

Your choices. The link “Do Not Sell or Share My Personal Information” at the bottom of every page lets you turn off analytics, advertising, or both, in that browser, with “Reject all” or one switch at a time. Turning a tool off stops it there and removes the cookies these tools set on this site that our script can reach. It does not remove cookies those companies set on their own sites. These choices are kept in your browser, so use the link, or Global Privacy Control, in each browser you use; an email can’t turn them off in your browser or change what it does. You can also email hello@hometownfieldguides.com to have us delete the advertising identifiers we hold with your order (our server deletes them itself once the purchase record is sent). We can’t recall a record already sent to Google, Meta or TikTok, and we can’t find you inside their tools; their own privacy settings cover what they hold. If your browser blocks storage for this site, or a choice can’t be saved, we can’t keep it, so the tools stay off for the rest of the visit.

Global Privacy Control. If your browser sends a Global Privacy Control signal, we treat it as a request to opt out of sale and sharing. The advertising tools stay off in that browser, as if you had used the “Do Not Sell or Share My Personal Information” link, and Microsoft Clarity’s session recording never starts, even if you allow analytics. “Opt-Out Request Honored” shows beside that link on pages where our choices script runs, for as long as the signal is on. It does not show on “The monarch life cycle, for kids,” because that page runs no script and shares nothing. If we have already honored the signal in this browser and the signal later stops, we do not start advertising again. We do not store the signal for a visit we treat as outside the United States, because the tools do not run on that visit. The signal does not turn off Google Analytics, which we use only to measure this site, if you allowed analytics. We don’t respond to “Do Not Track” signals, which have no agreed meaning.

Analytics. These help us see how the site is used, so we can improve it.

When advertising is allowed in your browser, we turn on Google Analytics’ “Google signals”: Google links your visits here to your Google account, if you are signed in to Google and your account allows ad personalization. That lets us see visits across your devices, and reports on the age range, gender and interests of visitors, which we see only as totals. When advertising is off, Google signals is off. We also keep Google from using Analytics data for ads unless the advertising tools are allowed in that browser. When advertising is off, the Google Ads tag does not load. Google Analytics still runs so we can measure this site. We tell Google not to use that Analytics data for ads, and we turn on Google’s control that blocks advertising data when advertising storage is denied.

Advertising. These tell us whether our ads led to a visit or a checkout, and let us show our ads to people who have visited this site, on Google, Facebook, Instagram and TikTok. If you arrive by a link that carries campaign tags, from one of our ads, an email or anywhere else, those tag values (the source, medium, campaign, ad and term named in the link) are saved with your order when you start checkout, whatever you choose about cookies, and they travel in the page address while you move around the site. We use them only to count which link led to a sale. They reach our analytics tools under analytics consent, and never an advertising company unless you allow advertising. When advertising is allowed in your browser, Google’s ad click id from that link also goes with your order, and stays on it only as long as the other advertising identifiers.

Google, Meta, and TikTok can also use what their advertising tools collect for their own purposes, including ads on other sites, and they may connect it to an account you have with them. That can include your activity over time and across other websites. We tell Microsoft that Clarity’s advertising storage is denied, whether or not our advertising tools are on. Microsoft says that, with advertising storage denied, Clarity does not share what it collects with Microsoft Ads. Their notices: Google (https://policies.google.com/privacy and https://business.safety.google/privacy/), Meta (https://www.facebook.com/privacy/policy/), TikTok, TikTok USDS Joint Venture LLC, for visitors in the United States (https://www.tiktok.com/legal/page/us/privacy-policy/en), and Microsoft (https://privacy.microsoft.com/privacystatement). You can also opt out of many interest-based ads at https://www.aboutads.info/choices and https://www.youronlinechoices.eu/.

Under California law, letting Google Ads, Meta or TikTok collect information here, and letting Google use what Google Analytics collects for ads when advertising is allowed (Google signals and the hashed contact details), is “sharing” personal information for cross-context behavioral advertising. It is also a “sale” under California law, and under other state laws that count the value of the advertising service, even though no one pays us money for the information. Other states call the same thing “targeted advertising”. The companies that may receive it are Google, Meta and TikTok. You can opt out with the link at the bottom of every page, or with Global Privacy Control.

Automatic matching and page details. When advertising is allowed in your browser, these tools also look for contact details on our pages, and use them to match your visit to an account you have with them and to measure our ads:

• The Google tags look for email addresses, phone numbers, names and addresses shown on our pages or typed into them. Google hashes an email address, phone number, name or street address before it leaves your browser; a city, state, ZIP code or country goes as it is.
• The Meta and TikTok pixels look for contact details typed or shown on our pages, for example the ZIP code you type into the finder, and send them hashed. Meta and TikTok call this automatic advanced matching.
• Meta’s pixel also sends details of the page and the buttons you click (Meta’s automatic configuration, and what Meta calls “more detailed page and product info”). TikTok’s pixel also sends the page’s content, your clicks, the time you spend on the page and how the page performed (what TikTok calls “enhanced data postback”).

When advertising is off, none of this runs: the Meta and TikTok pixels don’t load, and the Google tags send no contact details.

Purchases. When you buy with advertising allowed in your browser at checkout:

• On the thank-you page, in the browser you checked out in, Google Analytics receives a one-way hash (SHA-256) of your email address and, when checkout collected them, of your first and last name, with your billing ZIP code and country as they are (Google’s format takes those two unhashed). Our server works out the hashes; your plain email address and name are never put on the page. Google uses them to measure our ads and to match the purchase to a Google account. If advertising is off in that browser when the page opens, Google Analytics records only the purchase.
• Once your payment goes through, our server sends Meta and TikTok a record of the purchase. It contains a one-way hash (SHA-256) of your email address and, when checkout collected them, of your first name, last name, ZIP code, city, state and country; the guide and its price; the browser identifiers their tools set on this site (Meta’s _fbp and _fbc, TikTok’s _ttp and its click id); your IP address; and your browser’s user-agent (the line that names your browser and device). It lets them tell whether an ad led to a sale, and match it to their own records of you.

Hashed details are still personal information: the advertising companies can match them to their own records of you. This is part of the “sale” and “sharing” described below, and the same opt-outs stop it: if advertising is off in your browser, or it sends Global Privacy Control, when you check out, nothing is sent to Meta or TikTok, and nothing is sent for a visit we treat as outside the United States. For a checkout from a state where we ask before any advertising tool runs, the record goes to Meta and TikTok only if you have accepted advertising in that browser. Our server holds those browser identifiers, your IP address and the user-agent with the order in Stripe only until it has sent the purchase record, or given up trying; then it deletes them from the order. Stripe keeps the name and address you gave at checkout with the order.

What we never send. We never send your plain email address, name, phone number, Stripe session id or download link to Google, Meta or TikTok. Hashed contact details go to Google, Meta and TikTok only as described above, and only with advertising allowed. The thank-you page’s address does not contain the session id. The order reference in the purchase records is a code that can’t be turned back into your email or your session id. We never send anything about a child through these tools.

Where the tools never run. They don’t load on our page for children (“The monarch life cycle, for kids”), on download pages, on the lost-link page (where you type your email address), on the page that explains your choices, on the page-not-found page, or on pages still marked as drafts. On the thank-you page, only Google Analytics loads, only in the browser you checked out in, within the hour, and only to record the visit and that purchase (with the hashed contact details in “Purchases”, when advertising is allowed). It does not record a purchase if that page is opened in another browser. The same browser records a purchase once, using a short list it keeps (below). If the browser’s storage is blocked when the page opens, nothing runs there and nothing is recorded (and you would be asked to choose again). If storage works but the list can’t be written, because it is full or was cleared between visits, opening the page again within the hour can record the purchase again. Clarity and the advertising tools never load on the thank-you page or on any other order page.

Our own cookies and storage. We set three small cookies of our own:

The first two don’t prove anything on their own. We also keep a few things in your browser’s own storage, not in cookies:

• htfg_consent: your choices. If a full record won’t fit, a one-character opt-out of both kinds of tool takes its place. An opt-out stays until you clear your browser’s storage. An agreement given in a state where we ask first is asked again after 12 months.
• htfg_region_v3: whether you’re visiting from a state where we ask first, or elsewhere in the United States, for this visit only. Nothing is stored for visitors outside the United States.
• htfg_storage_failed: set for this visit only if a choice couldn’t be saved, so the tools stay off until you close the tab.
• htfg_sent: which orders have already been reported, so a purchase isn’t counted twice. It keeps the 50 most recent entries, in this browser, until you clear its storage. It is not deleted after 12 months.
• htfg_ad_tag: only while advertising is allowed, the campaign tag from the link you arrived by, so it can go with your order if you buy later. We stop using it after 30 days and remove it on a later visit, and it is deleted as soon as advertising is off in that browser.
• htfg_probe: a 2 KB value written, read back and removed at once, to check that your browser lets us keep a choice.

Nothing is stored on our page for children.

Stripe runs checkout on its own site and may use its own cookies there, for payments, security and fraud prevention. Stripe’s privacy policy covers those.

How we use this information

• Process your purchase and deliver your guide.
• Send new download links when you ask for them.
• Answer your emails, including support and refund requests.
• Read your answers and feedback to improve future guides.
• Keep the site working and secure, and stop abuse of our forms and download links.
• Keep the records we need for accounting, taxes and handling disputes.
• See how the site is used, count the checkouts and sales our ads lead to, and show our ads to people who have visited (see “Cookies and tracking”).

We don’t send newsletters or marketing emails. If that changes, we will update this page first, and every marketing email will include a way to unsubscribe.

Who we share information with

We use a few companies to run this site. Each one handles information so it can do its job for us. Some of them also use it for their own legal, security and fraud-prevention purposes, under their own privacy policies.

No one pays us money for your personal information. Google Ads, Meta and TikTok still count as “sharing” it for targeted advertising, and as a “sale” where the law counts the value of the advertising tool. “Cookies and tracking” says what they receive and how to opt out. Google Analytics and Microsoft Clarity receive visit information so we can measure this site. When advertising is off, we permit Google Analytics and Microsoft Clarity to measure this site, and we do not permit them to use that data for ads. When advertising is on, Google may also use visit information, Google signals and the hashed contact details to measure and show ads. Clarity’s advertising storage stays denied either way.

We may also share information if the law requires it, to defend a legal claim, or to protect people who use this site.

How long we keep information

• Orders and refunds: we keep the record of your purchase (your email address, your name and billing address, the guide, the amount, any sales tax, the date, any refund and, if you arrived by a link that carries campaign tags, those tag values) for 7 years after the purchase, for tax, accounting and legal reasons, and delete it in the yearly clean-out that follows (so up to a year longer). Stripe keeps its own payment records under its own policy.
• Advertising identifiers on an order: if advertising was allowed at checkout, the ad platforms’ browser identifiers, your IP address and your browser’s user-agent stay on the order only until our server has sent the purchase record (usually within minutes of payment, or after it gives up trying), and are then deleted from it.
• Download links: each link stops working 30 days after it was issued: the thank-you-page link counts from your purchase, the emailed link from when we first tried to send it, and a re-sent link from the re-send. That doesn’t delete your order record or our host’s logs.
• Our checkout and order cookies: expire one hour after they are set.
• Google Analytics: we have set it to keep the information tied to cookie identifiers for 14 months. Totals, such as the number of visits in a month, are kept longer.
• Microsoft Clarity, Google Ads, Meta and TikTok: each keeps what its tool collects under its own policy and settings. Their cookies last as listed in “Cookies and tracking”.
• Your choices in your browser: an opt-out stays until you clear your browser’s storage; an agreement given in a state where we ask first is asked again after 12 months.
• Your emails to us: kept for 3 years after the last message in the conversation, so we can answer you and keep a record of what we agreed, including refunds, then deleted in the yearly clean-out that follows.
• Your thank-you-page answer: kept for 2 years, to improve the guides, then deleted in the yearly clean-out that follows.
• Website logs: kept by Vercel for a limited time, under its own settings.

Your choices and rights

You can ask us to:

• tell you what personal information we have about you;
• correct it;
• delete it;
• send you a copy; or
• stop using it for a particular purpose.

Email hello@hometownfieldguides.com to ask. We may ask for details that confirm it’s you and help us find your records, such as the email address you paid with. We will answer within 45 days. If we need longer, we will tell you why and when to expect an answer. If we can’t do what you ask, we will tell you why, for example because we must keep a purchase record for taxes. If you disagree with our answer, reply with the word “Appeal”: a person at our company who did not make the first decision will look again and answer within 60 days, with reasons. You can contact your state’s attorney general or, outside the United States, your data protection authority at any time. Someone you authorize can ask for you, if they show they are acting for you. A person at our company handles privacy requests. We won’t treat you differently for using any of these rights.

To turn off the analytics and advertising tools, use the link at the bottom of every page, or Global Privacy Control; see “Cookies and tracking”. By email, you can also have us delete the advertising identifiers held with your order. We can’t find you inside Google’s, Meta’s or TikTok’s tools from an email.

Deleting your information doesn’t delete a guide you already downloaded. Asking for a refund doesn’t require you to delete the file (see our Refund Policy).

You don’t have to give us any information. Without an email address, we can’t sell you a guide or send your download.

US state privacy laws

Some US states give their residents specific privacy rights, such as the right to see, correct, delete or get a copy of their personal information, and to opt out of some uses of it. Wherever you live, you can make the requests described in “Your choices and rights” above.

Opting out of sale, sharing and targeted advertising. Use the “Do Not Sell or Share My Personal Information” link at the bottom of every page, or turn on Global Privacy Control. Both work for the browser you use them in. Email hello@hometownfieldguides.com if you want us to delete or correct an order or a message we hold. Email cannot turn these tools off in your browser.

We started using these advertising tools on September 28, 2026. Before that day, we had not sold or shared personal information. Since then, we have shared these kinds of personal information with Google, Meta and TikTok for advertising: identifiers (cookie identifiers, your IP address, and one-way hashes of contact details: your email address, the name, ZIP code, city, state and country from checkout, and contact details the tools find on our pages), approximate location (from your IP address, and the ZIP code and country from checkout, which Google receives as they are), commercial information (which guide you looked at, started to buy or bought, and its price; Google Ads counts purchases only through Google Analytics, when advertising is allowed), internet or network activity (the pages you visit here, your clicks, and details of the pages and how long you spend on them), inferences (the age range, gender and interests Google estimates through Google signals), and device and browser details. We use the information for the purposes in “How we use this information”.

We don’t knowingly sell or share the personal information of anyone under 18. We don’t ask your age when you browse, so this is about what we know, not a block on every younger visitor. Analytics and advertising never run on our page for children.

Children

Our checkout and our forms are for adults 18 and over. We don’t knowingly collect personal information from children under 13. Children should not use our forms or email us.

“The monarch life cycle, for kids” is written for children. No analytics or advertising tool runs on that page, and nothing is stored in the browser there. The only personal information we collect there is a persistent identifier in our host’s ordinary connection logs, such as an IP address and the page you asked for. We use it only to deliver the page, keep the site working, and spot abuse. We don’t use it to contact a child, to build a profile of a child, or for advertising, and we don’t copy it into the advertising tools. Our host keeps those logs for a limited time under its own settings.

If you believe a child has sent us personal information, email hello@hometownfieldguides.com. We will look into it and delete information we should not have.

Visitors outside the United States

Supertrained Inc. is based in the United States. If you are outside the United States, none of our analytics or advertising tools runs for you, and we store nothing in your browser for them.

We use the contract with you to take payment and deliver a guide. We use a legal duty for tax and accounting records. We use our interest in keeping the site secure for connection logs, and in answering the emails you send us.

Your information is processed in the United States, and in other countries where the companies in “Who we share information with” operate. Their notices, linked above, describe how they protect those transfers. You can ask to see, correct, delete, or receive your information, and you can object where we rely on our own interest. You can complain to your local data protection authority. We have not appointed a representative in the EU or the UK. To make a privacy request, email hello@hometownfieldguides.com.

Changes to this policy

If we change this policy, we will update the date at the top. If a change is significant, we will make it easy to notice on this page.

Contact

hello@hometownfieldguides.com

Supertrained Inc. 7901 4th St N STE 300 St Petersburg, FL 33702 United States