Privacy Policy
Updated September 30, 2026
Account and activity data
Accounts store your email, display name, password hash, and settings. Features you use may store favorites, journal entries, reviews, collections, API keys and usage counts. Public reviews, public collections, and your public profile can be viewed by other visitors. Private journals and private collections require your account.
Messages and newsletter
Contact messages and strain requests are stored in a staff inbox for review. Avoid sending sensitive personal or health information. Newsletter signup stores your address and confirmation information; an emailed confirmation is required before newsletter delivery. Every newsletter must include an unsubscribe link. A new signup request does not undo an existing unsubscribe until you confirm it.
AI features
Messages submitted to StrainBot are sent to Anthropic to generate replies. TerpScout requests are sent to xAI to interpret search preferences, with Anthropic as a fallback when xAI is unavailable or cannot return valid criteria; a request may be processed by both providers. Choosing Discover Pairings sends the displayed strain name, type and effect tags to Anthropic for creative suggestions. These features do not automatically send your private journal or account password. Do not enter information you do not want these providers to process. AI responses can be inaccurate.
Hosting, monitoring, and payments
Vercel hosts the application and provides usage analytics. Neon hosts the database. Sentry error and performance monitoring may operate when configured. These services can process technical request information such as browser details, routes, errors, and network addresses. When paid checkout is enabled, Stripe processes payment and subscription information; we store customer and subscription identifiers, not card numbers. Our configured email provider processes the address and content needed to deliver confirmation and newsletter emails.
Cookies and browser storage
The sc-session cookie keeps you signed in. Browser storage remembers preferences such as theme, dismissed notices, favorites saved without an account, and comparison selections. Optional Google Translate sets language cookies and sends page content to Google when you choose translation. Turning translation off does not erase information already processed by Google. You can clear site cookies and browser storage in your browser settings; doing so may sign you out and remove local preferences.
Retention and deletion
Account records remain until you delete your account or request removal. Account settings let you delete the account after entering your password and confirming the action. This removes the account, keys, private journals, favorites, collections, reviews, and associated account records. Connected Stripe subscriptions are canceled as part of deletion. Newsletter preferences and messages submitted outside your account are separate; unsubscribe or contact us to request their removal. Service providers may retain operational backups and billing records under their own retention policies; deleting an account does not recall copies of content already shared publicly.
Security and your choices
Passwords are hashed and account sessions use an HTTP-only cookie. Access checks protect private account features. You can edit your profile and password in settings, choose whether a collection is public, revoke API keys, and delete your account. For access, correction, or deletion requests that cannot be handled in settings, use the contact form with the privacy topic. We may need to verify ownership before changing or disclosing personal information.