1 · The short version
We collect what's needed to keep your humidor working — your email, your handle, your password (hashed), and the cigars/lounges you log. We don't sell data and we don't run third-party ad tracking.
2 · What we store
- Account: email, username, a bcrypt hash of your password, the timestamp you signed up, your last login time and IP.
- Profile: anything you fill in (display name, bio, country, avatar). Your profile is public by default; you can hide your humidor and reviews in settings.
- Activity: cigars in your humidor, smokes logged, ratings, reviews, follows, lounge check-ins.
- Sessions: a hashed cookie that proves you're signed in. Expires automatically.
3 · What we don't do
- We don't sell your data.
- We don't run third-party ad tracking pixels.
- We don't share your email with anyone unless we're required to by law.
4 · Cookies
Essential session cookie only. We do not set marketing or analytics cookies on the public site.
5 · Where your data lives
Servers are in the EU (Hetzner, Falkenstein). Photos are stored in Cloudflare R2. We use Sentry for error reporting; tracebacks may include your username when an error happens during a request you made.
6 · Your rights
Under GDPR (and similar laws elsewhere) you have the right to see what we hold, correct it, or have it deleted. Email [email protected] and we will action your request within 30 days. Step-by-step for account and data deletion is on the data deletion page.
7 · Changes
We post updates here and note the new "Last updated" date. Material changes go out by email.