Privacy
What grocers.com collects when you use it, and what happens to it.
Reading the site
You can read every page without an account. The web server keeps standard access logs (your IP address, the pages requested, browser type and time) for a limited period, as almost every website does. Nothing else is recorded and no advertising or analytics trackers are used. Each page load is counted: the page, the site it came from, and a random cookie called gvid that tells repeat visits apart. That id is not linked to an account and identifies nobody. Cloudflare Web Analytics may also count page loads; it sets no cookies. Counts are kept as daily totals; the raw log is deleted after 90 days.
Creating an account
If you sign in, the site stores:
- your email address and the display name you choose;
- a hashed version of your password if you set one (the password itself is never stored);
- your Google account identifier if you sign in with Google, so the site can recognize you next time;
- session records so you stay signed in, including the IP address and browser used;
- failed sign-in attempts for a short time, to block password guessing.
Signing in with Google shares only your name, email address and Google account identifier with this site. The site cannot see your Google password or anything else in your Google account.
Cookies
The site sets a small number of cookies needed to keep you signed in and to protect forms against forgery. There are no third-party cookies, except those Google sets itself when you use the Google sign-in button.
Activity records
To understand how the site is used, sign-ins and sign-outs are recorded with the date and time, your IP address and browser type. None of this is shared with anyone.
Your address is used to verify your account and to send password reset links when you ask for them. It is not used for marketing and is not given to anyone else.
Contact messages
A message sent through the contact form is emailed to Grocers Support Systems and kept on the server with the name you give, the email address if you give one, the IP address and browser it came from, and your account number if you were signed in, to read and perhaps answer it and to hold back automated spam. An email address is optional and is used only to reply to you. Nothing is sent to you automatically. Screenshots you add to a message are made smaller, redrawn without anything else the file carried (such as a photo's location) and attached to that email; they are not kept on the server.
Sharing
Account information is not sold, shared or transferred to any third party. It stays on the server that hosts this site.
Deleting your account
You can delete your account yourself from the Account page after signing in. That removes your email, name, password and sign-in sessions immediately. The deletion itself is recorded with its date, IP address and browser and a one-way fingerprint of the address, not the address, so a disputed deletion can be checked against an address someone gives. Activity records are kept but are no longer tied to an account. If you cannot sign in, use Forgot password on the sign-in page; the reset link goes only to the address on the account. Requests by email cannot be verified, so accounts are not deleted that way.
Changes
If this policy changes, the new version will appear on this page with the date below.
Last updated September 19, 2026.