Privacy policy
This policy explains what BudAboutcollects, why we collect it, who helps us process it, and the choices you have. We keep it plain and we don't sell your personal data.
Version 1 — last updated July 2026. This is general information, not legal advice; a licensed attorney should review this policy before you rely on it.
What we collect
We collect only what we need to run your account and the site. Depending on how you use BudAbout, that can include:
- Account details — the email address, name, and username you register with.
- Your password — stored only as a bcrypt hash. We never keep your plain-text password and cannot read it.
- Google profile — if you use Sign in with Google, we receive your name and email address from Google to create or match your account.
- Delivery waitlist — the email address you give us to join the delivery waitlist.
- Ratings & reviews — the star ratings and written reviews you submit, tied to your account.
- Server & log data — standard technical data such as your IP address and browser user-agent, recorded automatically to keep the service running and secure.
Cookies we set
We use a small number of cookies, and they are all essential or functional — needed to sign you in, keep the age gate working, and protect the sign-in flow. We do not currently run advertising or third-party tracking cookies.
| Cookie | Lifetime | Purpose |
|---|---|---|
| budabout_age_ok | ~180 days | Remembers that you confirmed you are 21 or older so the age gate does not reappear on every visit. |
| budabout_session | Session / until sign-out | Keeps you signed in to your account. Set as httpOnly, so it cannot be read by scripts in your browser. |
| g_oauth_state | A few minutes | A short-lived CSRF token used only during “Sign in with Google” to make sure the sign-in you finish is the one you started. |
Third parties who process data for us
A few trusted service providers process data on our behalf so we can run sign-in, send account emails, and keep the site fast and secure. Each has its own privacy policy that governs how it handles data:
If you choose “Sign in with Google,” Google confirms your identity and shares your name and email with us.
Read their privacy policy →Delivers account emails such as address verification and two-factor (2FA) codes on our behalf.
Read their privacy policy →Serves the site quickly and helps protect it from abuse; it processes basic request data like IP addresses.
Read their privacy policy →Runs the servers that store your data and serve the site. Data stays on infrastructure we control.
How we use your data
We use the data above to:
- Authenticate you and keep you signed in to your account.
- Send account emails, including address verification and two-factor (2FA) codes.
- Tie your ratings and reviews to your verified account, so a verified-purchase rating reflects a real, accountable reviewer.
- Keep the site secure and investigate abuse or fraud.
We do not sell your personal data. We share data only with the service providers listed above, strictly so they can perform these functions for us.
Retention & your rights
We keep your account data for as long as your account is active, plus a reasonable period afterward to meet legal, security, and record-keeping needs. When data is no longer needed, we delete or anonymize it.
You can ask us to:
- Access the personal data we hold about you.
- Correct data that is inaccurate or out of date.
- Export a copy of your data.
- Delete your account and associated data.
To make any of these requests, email us at [email protected] from the address on your account so we can verify it's you.
Security
We take reasonable measures to protect your data. Passwords are stored only as bcrypt hashes, never in plain text, and all traffic to the site is served over HTTPS. Our session cookie is httpOnlyso it can't be read by page scripts. No system is perfectly secure, but we work to keep your data safe and to fix issues quickly when we find them.
For adults 21+
BudAbout is intended only for adults 21 years of age or older. The service is not directed to minors, and we do not knowingly collect personal data from anyone under 21. If you believe a minor has provided us data, contact us at [email protected] and we will remove it.
Changes & contact
We may update this policy as BudAboutevolves or as the law changes. When we make material changes, we'll update the "last updated" date above and, where appropriate, notify you. Continued use of the site after an update means you accept the revised policy.
Questions about your privacy or this policy? Email us at [email protected].
What BudAbout is (and isn't)
BudAbout is a review and information brand for adults 21+. We do not sell cannabis and we are not a dispensary. We publish honest reviews and neighborhood shopping guides. Always buy only from New York OCM-licensed dispensaries — you can verify licenses on the New York Office of Cannabis Management site.
Our product descriptions cover aroma and flavor only — we make no health, medical, or effect claims. Any THC or CBD figures we show are reported by the producer and are not lab-tested by BudAbout. Nothing on this site, including this policy, is legal or medical advice.
For adults 21+. BudAbout does not sell cannabis and is not a dispensary. This page is general information, not legal or medical advice.