Privacy
This is a plain-English template for Soddesk (https://soddesk.com), sponsored by Confluence Holdings. A lawyer has not signed off on it. It describes what the site actually does as of the date above.
Who we are
Soddesk is a free site that sends sod-job requests to a partner grower. We do not sell sod. Questions about this page: frost@soddesk.com. There is no public phone number and no street address. Jobs should go through Start a job, not email.
What the job form collects
If you submit Start a job, the form collects:
- Name, company, phone, and email
- Job address
- Area and unit (square feet or square yards)
- Grass type (Tifway 419 Bermuda is the only choice on the form right now)
- Sod format (pallets, big rolls, or not sure), stored as the first line of the notes
- Desired delivery date
- Site access notes (optional) and other notes (optional)
- Your consent, including the consent wording and a version id
The database also stores a fixed value, "not sure," in a column that used to record whether you had bought from the grower before. The form no longer asks that question, and it does not name a grower.
We also store a short hash of the IP address (see below), the browser user-agent string (cut off at 300 characters), and the hostname Cloudflare Turnstile reports for the spam check.
Where that information goes
- Database. The submission is stored in a Cloudflare D1 database so we can track the request and the consent you gave.
- Email. Leads may be emailed through Resend: an alert to us, and a confirmation to the email address you entered. If email is not configured, the lead is still saved and the email step is skipped.
- Spreadsheet. A copy may be sent to a Google Sheet (through a Google Apps Script webhook) for whoever is working the leads. If that webhook is not configured, the copy is skipped and the database row remains.
- A partner grower. Contact details are shared with a partner grower only as the consent text says: so that grower can quote and fill the order. Soddesk is paid a commission by growers who fulfill orders. Buyers do not pay Soddesk.
We do not sell personal information. We do not use the job form for advertising.
Spam checks and the IP hash
The form uses three spam controls:
- A hidden field. If it is filled in, we pretend the form succeeded and store nothing.
- Cloudflare Turnstile on the form. Turnstile loads a script from Cloudflare and, under Cloudflare's Turnstile privacy addendum, processes signals such as IP address, TLS fingerprint, user-agent, and the site key and page origin to tell humans from bots. That processing is for bot detection. See Cloudflare's Turnstile privacy addendum (last updated June 18, 2025).
- A rate limit. We hash the IP address with a secret salt (SHA-256) and store only the first 32 hex characters of that hash. We count recent submissions with the same hash. We do not store the raw IP address in the lead record.
Tools that stay in the browser
The sod calculator does not send measurements to our server. If you click "Send this to Start a job," the page only puts the square-yard total and the sod format you picked into the form's web address. You still have to fill in the form and submit it.
The labor and job cost estimator runs in the browser. Your rates and costs are not sent to us. If you click "Send line items to the quote builder," the lines are put in this browser's local storage for the quote builder to read, then removed.
The quote builder is for a landscaper's own customer quote. Company name, customer, prices, notes, and an optional logo are handled in the browser. The logo is read on your device and is not uploaded. You can save a quote in this browser's local storage. Nothing on that page is sent to Soddesk. Clearing the site data in your browser deletes the saved quote.
Cookies and analytics
The site code does not set analytics cookies and does not load Google Analytics, advertising pixels, or a similar tracker. We do not run a separate analytics product.
Turnstile may use browser storage as part of the spam check. We have not enabled Turnstile pre-clearance (the option that sets a clearance cookie for later visits).
Cloudflare hosts the site. Like other hosts, it processes connection data (such as IP address) to deliver pages and to protect the network. That is described in Cloudflare's own privacy policy. We do not control Cloudflare's network logs and we do not use them as a marketing list.
How long we keep leads
We have not published a retention schedule. Lead records are kept so the job can be passed to a grower and so we have a record of what was submitted and which consent text you saw. To ask about a record, email frost@soddesk.com and include the lead ID if you have it (it looks like SD-2026-000001). We may need to keep a record of the request even if we delete a contact detail, for example to show that a commission was or was not owed.
Children
The site is for businesses buying or specifying sod. It is not directed at children.