Privacy policy

Straindex is an information service operated by RaizHost LLC: a directory of state-licensed cannabis retailers with cross-store price information. We do not sell, deliver, or facilitate the purchase of cannabis, and you do not need an account to browse. This policy explains what data we collect, why, and who it is shared with.

Information we collect

Server logs. Our servers record your IP address, browser user-agent, the page path, and the request’s query parameters (which can include the search terms and approximate location coordinates you submit). These logs are used for security, abuse prevention, and rate-limiting.

Search & location. When you search for a place (city, ZIP, or address) or tap “use my location,” the text you type and/or your device’s approximate coordinates are sent from your browser to Mapbox, our maps and geocoding provider, to turn that into map results. Mapbox acts as our service provider for this lookup; its handling of that data is governed by its own privacy policy.

Waitlist signup. If you join the waitlist, we store the email address you provide, any feature interests you select, how you arrived (referrer and campaign/UTM tags, when present), and the IP address of the submission. We use this to notify you when features launch and to prevent abuse of the form.

Issue reports. If you report a problem with a listing, we store the correction details and any message you include, along with the submission IP, so we can triage and fix the data.

Local browser storage. We use your browser’s local storage (not cookies) for a few functional things that stay on your device: the timestamp of your 21+ confirmation (kept ~30 days so you are not re-prompted every visit), your recent searches, your category preference, and a short-lived cache of geocoding results. We do not read these values on our servers.

Analytics (first-party, cookieless). We measure aggregate traffic ourselves, on our own servers, to understand which pages are used. For each page view we record the page path, the referring website (if any), an approximate country, and a coarse device type (mobile, tablet, or desktop). To count daily unique visitors without identifying you, we combine your IP address and browser with a secret value that rotates every day and store only the resulting one-way hash — never the raw IP address. Because that value changes daily, the hash cannot be used to recognize you across days or to build a profile of you. We set no cookies for this and use no third-party analytics service.

How we use information

To operate, secure, and improve the directory: to return search and map results, to keep the service available and rate-limited against abuse, to notify waitlist subscribers, and to correct and improve our coverage of public records and menus.

What we do not do

We do not sell or rent your personal information. Our analytics are first-party and cookieless (described above); we do not run any third-party analytics, advertising, or tracking pixels, and we do not load any third-party ad networks. The only third party that receives data in the course of using the site is Mapbox, for the geocoding/maps lookup described above, as our service provider.

Data sources we publish

Dispensary license records are public records published by state cannabis regulators; we reproduce names, license numbers, addresses, and operating status from those public feeds and add geocoding and normalization. Menu and price data, where present, is collected from operator-published storefronts. This is information about businesses, not about you.

Retention

We keep personal data no longer than necessary for the purposes above. Waitlist emails are kept until you unsubscribe; server logs and issue-report records (including submission IPs) are kept only for as long as needed for security, rate-limiting, and triage, after which they are deleted.

Your choices

You can unsubscribe from the waitlist at any time using the link in our emails, or by contacting us. You can clear the local storage values above through your browser at any time. We do not sell or share personal information, so there is nothing to opt out of on that basis; if you are a California resident and wish to ask about, access, or delete data we hold about you, contact us at the address below and we will respond.

Children

straindex is intended only for adults 21 and over. It is not directed to children, and we do not knowingly collect personal information from anyone under 13.

Changes

If we change this policy, we will update the effective date above. Material changes will be reflected here before they take effect.

Contact

Questions or privacy requests: contact@straindex.raizhost.com.