Privacy Policy

We collect the minimum we need to run a community review site: your email, a handle, a timestamp of your 21+ attestation, and the content you post. We don’t collect your date of birth, we don’t run third-party ad trackers, and we never sell your personal information.

• Account data: email address, handle, optional perspective role (e.g. Consumer, Grower), and the date and time you attested you are 21 or older. We do not collect your date of birth.
• Content you post: reviews, ratings, reports, comments, and any disclosures you make with them (such as a conflict-of-interest note).
• Session data: authentication cookies that keep you signed in, and a browser session flag recording that you passed the age screen (cleared when your browser session ends).
• First-party analytics (when enabled): anonymous usage events — page views and feature steps — tied to a random session identifier. These events contain no name, email, or other personal identifiers, and we do not use third-party advertising or analytics trackers.

• To operate accounts, display your content, and moderate the community;
• To enforce our age requirement and our Terms (including anti-manipulation checks);
• To understand, in aggregate, how the site is used so we can improve it;
• To respond when you contact us, and to meet legal obligations.

We do not sell personal information, and we do not share it with advertisers.

Your handle, your perspective badge if you set one, and the content you post are public. Your email address and attestation record are not. Remember that reviews describe your own experiences — post only what you’re comfortable having public.

We use first-party cookies for sign-in sessions, and browser session storage for the age screen. When first-party analytics are enabled, a random session identifier cookie is used. We set no third-party cookies.

We host on infrastructure providers (currently Vercel and Supabase) that process data on our behalf under their own security and privacy commitments. Your data lives on their systems in the United States.

Account data is kept while your account exists. To delete your account and personal data, email contact@theleafguide.com from your account email; we will delete or de-identify your personal data within 30 days, except records we must keep for legal, security, or moderation-integrity reasons (kept no longer than needed). Public content you posted may remain in de-identified form.

The Service is for adults 21 and over. We do not knowingly collect information from anyone under 21, and we delete accounts we reasonably believe belong to underage users.

Material changes will be posted here with a new effective date. Questions or requests: contact@theleafguide.com.