Privacy Policy
Overview
Bring Me Weed ("we," "us," or "our") operates bringmeweed.net — a cannabis dispensary directory and discovery platform serving New York City and Long Island. We take your privacy seriously.
This Privacy Policy explains what information we collect when you visit our Site, how we use and protect that information, and the choices you have with respect to your data. By using the Site, you agree to the practices described in this policy.
This policy applies exclusively to bringmeweed.net. It does not apply to the websites of dispensaries, brands, or event organizers that we link to — those businesses have their own privacy policies which we encourage you to review.
Information We Collect
Information You Provide to Us
We only collect personal information that you voluntarily provide:
- Email address — collected when you subscribe to The Weekly Burn newsletter via our signup form. This is the only piece of personal information we actively solicit. We do not require account creation, and no passwords are ever collected.
Information Collected Automatically
When you visit and interact with the Site, our systems automatically collect certain technical and behavioral information to help us understand how the Site is being used and to maintain its performance:
- Hashed IP address — When you visit the Site, your IP address is immediately processed through a one-way SHA-256 cryptographic hash function before any storage. Your raw IP address is never recorded or retained on our servers. The hash is further salted with a key that rotates every 24 hours, making it impossible to reconstruct the original IP or link visits across days.
- Approximate city location — Your IP address is used once per visit to resolve your approximate city and state (for example, "Brooklyn, NY") via a third-party geolocation service. Only the resulting city string is stored — the IP itself is discarded immediately after this lookup and is never written to our database.
- Search zip code — If you use our dispensary locator and enter a zip code, that zip code is logged to help us improve directory coverage and understand which neighborhoods are most actively searching for dispensaries near them.
- Browser and device type — Your browser's user agent string is collected in truncated form (up to 255 characters) to help us understand what devices and browsers visitors use.
- Referring page — The URL of the page that linked you to ours is collected in truncated form (up to 500 characters).
- Dispensary listing interactions — We log which dispensary listings you viewed, and whether you clicked "Visit Website," "Get Directions," or "Call." These interaction events are associated only with your anonymized (hashed) identifier — never with your name, email address, or any other personal information.
- Newsletter engagement — If you are a subscriber to The Weekly Burn, our email delivery system may collect standard engagement data such as email open events and link clicks within newsletters.
How We Use Your Information
We use the information we collect for the following purposes:
- Newsletter delivery — Your email address is used exclusively to send you The Weekly Burn newsletter, which you subscribed to.
- Directory analytics — Aggregated and anonymized interaction data (views, clicks, zip codes) helps us understand which dispensaries and neighborhoods are most useful to visitors, and guides our efforts to expand and improve the directory.
- Site performance — Technical information (browser, referrer, city) helps us monitor Site health, identify errors, and optimize the user experience.
- Abuse prevention — Hashed identifiers and rate-limiting data are used to detect and prevent spam, bot activity, and abuse of our platform.
We do not sell, rent, trade, or otherwise share your personal information with third parties for their own marketing purposes. Information shared with service providers (described in Section 05) is limited to what is necessary to deliver our services and is governed by data processing agreements.
Cookies
We use a minimal number of cookies to provide core functionality of the Site. We do not use advertising cookies, third-party tracking cookies, or cross-site behavioral tracking.
| Cookie Name | Purpose | Duration | Type |
|---|---|---|---|
bmw_wb_subscribed |
Remembers that you have confirmed your newsletter subscription, granting access to gated Weekly Burn issue content. Set after email confirmation. | 1 year | First-party functional |
| WordPress session cookies | Standard WordPress CMS cookies. Only set if you are a logged-in administrator of the Site. Not set for regular visitors. | Session / variable | First-party functional |
You can control or delete cookies through your browser settings at any time. Deleting the bmw_wb_subscribed cookie will remove your gated content access — you will need to confirm your subscription again to restore it.
Third-Party Services
We use the following third-party services to operate the Site. Each service may process certain data about you as described below:
Used for: City-level geolocation. Once per unique visit, your IP address is sent to ip-api.com to resolve an approximate city and state (e.g., "Queens, NY"). This helps us understand which geographic areas our visitors come from. Only the resolved city string is stored — the IP is not retained by us after the lookup. Please review ip-api.com's terms for their own data handling practices.
Used for: Serving typefaces (DM Sans, Inter) for Site design. Fonts are loaded from Google's CDN servers. Google may log your IP address as part of this request per their own Privacy Policy.
Used for: Content management system (CMS) and page builder underlying the Site. Standard CMS functionality may set session cookies for logged-in admin users. Regular visitors are not tracked by these systems beyond standard server logs.
We do not use Google Analytics, Facebook Pixel, or other third-party advertising or behavioral tracking tools on this Site.
Data Retention
Analytics & Engagement Events
Anonymized engagement events (views, clicks, zip searches) are retained for a default period of 180 days, after which they are automatically purged from our database by a scheduled weekly cleanup process. The Site administrator may configure a shorter or longer retention period within a range of 30 to 730 days.
Newsletter Subscriber Data
Your email address is stored in our email system for as long as you remain subscribed to The Weekly Burn. When you unsubscribe, your address is marked as "unsubscribed" — this status is retained as required by the CAN-SPAM Act and anti-spam regulations. To request complete deletion of your subscriber record, please contact us directly.
Server Logs
Our web hosting provider may retain standard server access logs (which can include raw IP addresses) for a limited period as required for security and operational purposes. These logs are managed by our hosting provider and are subject to their own data retention policies.
Security
We implement industry-standard technical and organizational measures to protect your information, including:
- IP hashing — Raw IP addresses are never stored; only a daily-rotated SHA-256 hash is retained
- HTTPS encryption — All data transmitted between your browser and our Site is encrypted via TLS/SSL
- Rate limiting — Our tracking system limits events to 60 per IP per minute to prevent abuse
- Access controls — Admin access to analytics data requires WordPress administrator credentials
- Data minimization — We collect only the minimum data necessary to provide our services
No method of transmission over the Internet or method of electronic storage is 100% secure. While we strive to protect your information using commercially acceptable means, we cannot guarantee absolute security. In the event of a data breach that may affect your rights, we will notify affected individuals as required by applicable law.
Children's Privacy
If you are a parent or guardian and believe that your child under 21 has provided us with personal information (such as an email address via our newsletter form), please contact us immediately using the information in Section 11. We will take prompt steps to delete that information from our records and restrict access to the Site for that individual.
Your Rights
Depending on your location, you may have certain rights with respect to your personal information. We are committed to honoring those rights.
All Users
- Unsubscribe — You may unsubscribe from The Weekly Burn newsletter at any time by clicking the unsubscribe link in any newsletter email.
- Cookie opt-out — You may delete or block cookies via your browser settings at any time.
- Contact us — You may contact us to ask about what data we hold about you, request corrections, or request deletion.
New York State Residents
Under New York privacy law, you have the right to know what categories of personal information we collect and how we use them. This Privacy Policy is designed to fulfill that disclosure. If you have additional questions, contact us at the information in Section 11.
California Residents (CCPA / CPRA)
If you are a California resident, you have the following additional rights under the California Consumer Privacy Act (CCPA):
- Right to Know — The right to request disclosure of the categories and specific pieces of personal information collected about you
- Right to Delete — The right to request deletion of personal information we have collected from you, subject to certain exceptions
- Right to Opt Out of Sale — The right to opt out of the sale of personal information. We do not sell personal information.
- Right to Non-Discrimination — We will not discriminate against you for exercising any of your CCPA rights
To exercise any of these rights, please contact us using the information in Section 11. We will respond to verifiable requests within 45 days as required by California law.
Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make changes, we will update the "Last updated" date at the top of this page.
For material changes that significantly affect how we handle your personal information, we may provide additional notice — such as a notice in our newsletter or a banner on the Site — at our discretion.
We encourage you to review this Privacy Policy periodically. Your continued use of the Site after any changes take effect constitutes your acceptance of the updated policy.
Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:
Holbrook, NY 11741
Phone: 516-518-8091
Email: [email protected]
Hours: Mon - Fri: 9am - 5pm
Sat - Sun: Closed
We will do our best to respond to all privacy-related inquiries within 5–7 business days. For time-sensitive requests (such as data deletion requests), please indicate the urgency in your message.
You also have the right to lodge a complaint with the relevant data protection authority in your jurisdiction if you believe we have not adequately addressed your concerns.