Privacy

Your email address, your date of birth, and the timestamp of your 21-and-over attestation. That is the account.

The date of birth is kept so that age checks on dispensary websites can be answered for you instead of by you. We have always asked for it — it is how the 21-and-over check works — and we used to throw it away the moment that check passed. Now it stays on your account. We still never ask for your name or a photo ID.

Alongside that: whatever you tell us to watch for — a strain, a dose, a size, a price ceiling — and the alerts that go out when a watch matches.

And, if you attach them, photos and video on a journal entry. These are held in private storage: they have no public web address, and every time one is shown it is fetched through a check that you are the person it belongs to. Nobody else can open one, including from a link.

And anything you choose to log: what you bought, how you rated it, and your journal — when you used something, how, how much, and how it felt. Plus whatever is on your want list, and your settings: theme, sound, and what time of day you want your digest.

We do not record what you paid. Stash keeps no spending history and there is nowhere to enter a price; the only prices in the app are the shop's own, on their listings.

Your journal and your stash are the most private things here, and they are treated that way. They are never emailed to you or to anyone else, never included in an export, and never used to rank or recommend anything to anybody but you.

We don't run analytics on you, and we don't sell or share your data with anyone. There is no ad pixel on this site, and there never will be.

We know cannabis interest is sensitive information. It stays between you and this product — not packaged for advertisers, not handed to data brokers, not used for anything besides sending you the email you asked for.

One exception, and only if you use it. If you dictate a journal note instead of typing it, your browser does the transcribing. On most browsers that means your voice is sent to Google or Apple to be turned into text — the same as any other dictation on your phone. Some browsers can do it entirely on the device, and where yours can, the button says so before you press it and tells you which one just happened afterwards. Either way we only ever receive the words: no recording is made, sent to us, or stored anywhere by this app.

Your location, only when you ask for it. If you filter For You by distance, your browser asks for your location and the phone works out which stores are within range. Only that list of stores reaches us, as part of the page address. Your location itself is never sent to us or stored; each time you pick a distance it is read fresh, and the app keeps no copy.

Checkout details, only if you add them. If you enter your name and phone under Settings → Checkout details, we keep them with your account. When a shopping run fills a shop's cart through that shop's own checkout (Jane, for Hi Tide), they are sent to that checkout along with your email and birth date, so it arrives filled in. They go nowhere else, and clearing the fields deletes them.

Delete your account any time from Settings. That removes your watches, your alert history, your purchases, your reviews, your journal, any photos or video you attached to it, your My Bud-y Cart, your date of birth and your email address — fully, not a soft flag on a row.

Photos and video are stored separately from the rest, so deletion goes and asks the storage service what it is holding for you and removes all of it — rather than working from our own list, which could be missing a file we lost track of.

Reply to any My Bud-y email and it reaches a person, not a ticket queue. That's the whole support channel.