Privacy

Last updated 22 September 2026

Canopy is a free tool for designing polyhouses. This page says what we keep about you, why, who else sees any of it, and how to take it away or delete it.

What we keep

• If you create an account: your email address, the name you give, and your password, stored only as a salted scrypt hash that cannot be turned back into the password. We also record when the account was created and when you last signed in.
• Your saved designs: every setting of each design you save, including its site location if you set one, a short summary of its results, and up to 20 earlier versions of it.
• Sign-in sessions: while you are signed in, a random session code in a cookie. We keep only a hash of it, and which browser it was issued to.
• Server logs: like any website, our server logs each request (the address it came from, the page or data asked for, and when) to keep the site running and secure. Logs are rotated and old ones overwritten.

If you use the tool without an account, nothing about your design is stored on our server. The tool keeps your current, unsaved work in your own browser so a reload does not lose it.

Cookies

We use one cookie, canopy_session, and only after you sign in. It is what keeps you signed in; there are no advertising or tracking cookies.

Who else sees anything

We do not sell or share your personal data. To analyse a site, the tool looks up public data for its coordinates from these services, which receive the coordinates (not your name or email):

• Open-Meteo (weather history, elevation, air quality)
• OpenStreetMap: map tiles, place search (Nominatim) and nearby features (Overpass)
• Esri ArcGIS (satellite imagery) and AWS-hosted Terrarium elevation tiles

Canopy runs on a rented virtual server that only we administer.

Your data, your choice

• See and take it: under Account, Download my data gives you your account and every design as a file.
• Correct it: rename or change any design; write to us to change your email.
• Delete it: under Account, Delete my account removes the account and every design straight away. Backup copies are replaced within 7 days.

Keeping it safe

The site is served only over HTTPS. Passwords are hashed, sessions are unguessable and expire after 30 days unused, sign-in attempts are rate-limited, and the database is backed up nightly.

Contact

For anything about your data, including a forgotten password, write to support@canopy.org.in from the email address on your account.