Privacy Policy

Last Updated: March 2026

1. Introduction

Encycloweedia (“we,” “us,” or “our”) operates the Encycloweedia web application (the “Service”) accessible at https://encycloweedia.net. This Privacy Policy describes how we collect, use, disclose, and protect your personal information when you access or use our Service. By accessing or using the Service, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy.

2. Information We Collect

2.1 Information You Provide Directly

Account registration data: email address, username, and password (encrypted)
Subscription and billing information processed through our third-party payment processor. We do not store full credit card numbers on our servers.
User preferences such as saved strains, favorites, and journal entries
Communications you send to us (support inquiries, feedback)
Content you submit through interactive features (e.g., Buddy the Budtender chat inputs)

2.2 Information Collected Automatically

Device and browser information (device type, OS, browser type and version)
IP address, approximate geolocation (city/region level only)
Usage data: pages viewed, search queries, time spent on pages, feature usage
Referral source

2.3 Sensitive Data We Do NOT Collect

We do not collect, store, or process: medical records or health data, government-issued ID numbers, biometric data, cannabis purchase history or consumption habits, or precise GPS coordinates. Encycloweedia is an informational reference tool. We do not facilitate cannabis transactions of any kind.

3. How We Use Your Information

To provide, maintain, and improve the Service
To process and manage your subscription and account
To personalize your experience
To communicate regarding account activity and support
To detect, prevent, and address fraud or abuse
To comply with legal obligations
To conduct aggregated analytics to understand usage patterns

We will never sell your personal information to third parties. We will never use your data to build advertising profiles or serve targeted advertisements.

4. How We Share Your Information

4.1 Service Providers

We engage trusted third-party vendors to perform services on our behalf, including cloud hosting, payment processing, and email delivery. These providers are contractually obligated to use your data only as necessary to perform services for us.

4.2 Legal Requirements

We may disclose your information if required by law, subpoena, or court order, or to protect the rights, property, or safety of Encycloweedia, our users, or the public.

4.3 Business Transfers

In the event of a merger or acquisition, your information may be transferred. We will provide notice before your information becomes subject to a different privacy policy.

5. Data Retention

Active account data: retained for the duration of your account
Deleted account data: permanently purged within 30 days of deletion request
Billing records: retained for up to 7 years to comply with financial and tax regulations
Server logs: automatically purged after 90 days
Anonymized analytics data: may be retained indefinitely as it cannot be linked back to you

6. Cookies & Tracking Technologies

We use essential cookies for authentication and session management, and functional cookies to store your preferences. We do not use third-party advertising cookies, cross-site tracking technologies, or browser fingerprinting. You can control cookies through your browser settings. We honor Global Privacy Control (GPC) and Do Not Track (DNT) signals.

7. Data Security

We implement industry-standard security measures including encryption in transit (TLS/SSL) and at rest, bcrypt password hashing, and access controls. Our infrastructure is hosted on SOC 2 compliant platforms. While we strive to protect your information, no method of electronic transmission is 100% secure.

8. Your Rights and Choices

All users may: access, correct, or delete their personal information; request data portability; opt out of non-essential communications; withdraw consent where applicable.

California residents (CCPA/CPRA): right to know, delete, opt out of sale (we do not sell data), and non-discrimination.
Colorado residents (CPA): rights of access, correction, deletion, portability, and opt-out of targeted advertising and profiling.
European users (GDPR): rights to access, rectify, erase, restrict processing, object to processing, and data portability.

9. Children's Privacy & Age Restrictions

The Service is for adults aged 21 and older. We do not knowingly collect information from anyone under 21. If we learn a minor has provided data, we will promptly delete it.

10. International Data Transfers

The Service is hosted in the United States. If you access from outside the US, your data may be transferred to and processed in the United States.

11. Changes to This Privacy Policy

We may update this policy from time to time and will notify users of material changes by posting the updated policy and updating the Last Updated date.

12. Data Breach Notification

In the event of a data breach, we will notify affected users and relevant authorities in accordance with applicable law, including within 72 hours of discovery where required.

13. Contact Information

For privacy-related questions or data requests, contact us at privacy@encycloweedia.net. We will respond within 30 days.