The short version
WeedWize is a free, pharmacist-written educational site. It does not sell cannabis and it does not sell your data to anyone. The site sets no analytics cookies and no advertising cookies, and there are no ad networks and no tracking pixels. The directory carries paid listings from dispensaries; those are labelled sponsored where they appear, they are kept in their own section, and a dispensary that pays for one learns nothing about you. Almost everything the site remembers about you lives only in your own browser.
What stays in your browser
These are kept in your browser's local storage. They never leave your device and the server never sees them. Clearing your browser's site data wipes all of them.
- My medications: the list you build in the checker or on an interaction page.
- Colour scheme: light, dark or follow the system.
- Lesson progress and the ticks on the three-step start path.
- Age confirmation: that you confirmed you are 21 or older. It expires after 30 days.
- Strain compare picks, the last five medication lists you checked (so you can re-run one with a tap), and a visit count, the latter used only to decide when to offer the install prompt.
The medication checker
The checker runs in the page. The names you type are matched against a reference that ships with the site, and nothing you type is stored on our servers. When you share or print a result, the medication list is carried in the page address (for example, /check?meds=warfarin) so the person you send it to sees the same result. The list appears in the address only when you choose to share it. If you send that link to someone, they will see the medications in it.
What reaches the server
- Dispensary listing enquiries. If a dispensary fills in the get-listed form, the business name, contact name, email, phone, city, state and message are stored so Tiffany can reply. That form is for operators, and it is the only form on the public site that stores what you submit.
- Emails you send to info@weedwize.com are used only to respond to you.
- Access requests, only when the site is in maintenance mode: name, reason and IP address, so a developer can decide whether to approve. Records are purged once resolved.
- Security event log: failed staff sign-in attempts, IP block changes and maintenance toggles, capped and dropped automatically as it fills.
Cookies
The only cookie is the essential staff sign-in session cookie (httpOnly, sameSite=strict, secure), and it is set only when a member of staff signs in. There are no analytics cookies and no advertising cookies.
Third parties
WeedWize is hosted on Vercel, which may collect aggregate request logs as the infrastructure provider; Vercel's privacy policy applies to that. The typefaces (Onest and Lora) are bundled at build time and served from our own domain, so loading a page here does not call Google Fonts or any other font host. We do not share your data with anyone for advertising, including the dispensaries that pay for directory listings.
Health data
WeedWize is an educational reference. It keeps no medical record, no profile, no questionnaire and no history of what you read. The medication list described above stays on your device.
Children
The site is for adults 21 and over. We do not knowingly collect information from anyone under 21.
Your rights
To delete data we hold about you, email info@weedwize.com from the address you used to contact us. We honour requests within 14 days. California (CCPA) and EU (GDPR) residents have the same access, deletion and portability rights.
Security
Staff sign-in secrets are hashed before storage and sessions are signed cookies. The site enforces a strict Content-Security-Policy, Strict-Transport-Security, X-Frame-Options DENY and related headers, and endpoints that change data are protected by same-origin checks and per-IP rate limits.
Contact
Privacy questions: info@weedwize.com
WeedWize LLC, Arkansas. Mailing address available on request.