The short version
WeedWize is a free, pharmacist-authored educational site. We do not sell cannabis, we do not run advertising, and we do not sell data to anyone. We collect the minimum needed to keep the site running and to personalize your experience — most of which lives only in your browser.
What we store in your browser
- Age verification flag— confirms you clicked “I’m 21 or older.” Expires after 30 days.
- Selected state— the state you picked during onboarding.
- Personalization profile— your three answers from the onboarding wizard (experience, goal, daily meds). Used only to surface relevant recommendations. Never sent to our server.
- Saved favorites— dispensaries, strains, and CBD brands you tap the heart on.
- Cookie consent— whether you accepted non-essential cookies.
- Text-size preference— your accessibility setting.
Clearing your browser’s site data wipes all of it.
What we store on the server
- Newsletter or contact emails you submit— delivered to info@weedwize.com. Used only to respond and (if you ask) add you to the field-notes list.
- Demo access requests— only when the site is in maintenance mode. We capture your name, reason, and IP address so a developer can decide whether to approve. The record is purged once resolved (cap: 250 entries).
- Security event log— failed sign-in attempts, IP block changes, maintenance toggles. Capped at 250 events; older events are dropped automatically.
Cookies
- Essential (always on): the staff sign-in session cookie (httpOnly, sameSite=strict, secure). Required for the site to function.
- Analytics (opt-in): not currently wired. If we add Plausible or Vercel Analytics, it will only load after you accept.
You can change your cookie choice at any time by clearing site data and reloading the page.
Third parties
WeedWize uses Vercel for hosting and the Geist font from Vercel. Vercel may collect aggregate request logs as our infrastructure provider; their privacy policy applies. We do not share data with third parties for advertising. If we wire Cal.com for consultations or Resend for email later, both will be listed here when added.
Health data
WeedWize is an educational reference, not a medical record. We do not collect or store health information about you. The personalization profile lives only in your browser.
Children
The site is restricted to adults 21+. We do not knowingly collect information from anyone under 21.
Your rights
To delete data we hold on you, email info@weedwize.com from the address you used to contact us. We honor requests within 14 days. California (CCPA) and EU (GDPR) residents have the same access, deletion, and portability rights.
Security posture
All passwords / PINs are PBKDF2-hashed before storage. Sessions are HMAC-signed cookies (httpOnly, sameSite=strict, secure in production). The site enforces a strict Content-Security-Policy, Strict-Transport-Security with preload, X-Frame-Options DENY, and additional headers. Mutating endpoints are protected by same-origin guards and per-IP rate limits.
Contact
Privacy questions: info@weedwize.com
WeedWize LLC, Arkansas. Mailing address available on request.