Last updated: April 7, 2026
When you create an account, we collect your email address, display name, and password (stored securely hashed). When you use StrainCompass, we may collect usage data such as strains viewed, reviews written, favorites saved, and journal entries.
We use your information to provide and improve our services, personalize your experience, power AI recommendations through TerpScout, and communicate important updates about your account.
We implement industry-standard security measures to protect your data. Passwords are hashed using bcrypt. Sessions are managed via secure, httpOnly JWT tokens. All data is transmitted over HTTPS.
We use Neon (PostgreSQL hosting), Vercel (application hosting), and xAI/Grok (AI processing for TerpScout). These services have their own privacy policies governing data they process on our behalf.
You may request access to, correction of, or deletion of your personal data at any time by contacting us. You can delete your account and all associated data through your account settings.
We use a single session cookie (sc-session) for authentication purposes. We do not use tracking cookies or third-party advertising cookies.
For privacy-related inquiries, please contact us at privacy@straincompass.com.