Privacy Policy

Last updated: 2026-05-16

mmjnow.com ("we", "the site") publishes informational content about medical cannabis laws and qualifying conditions. This policy describes what little data we collect and how we handle it.

Data we collect

Analytics (self-hosted Umami). We record anonymous page views, referrer hostnames, country (derived from IP, the IP itself is discarded immediately), and device class (mobile / desktop). We do not set cookies, fingerprint devices, store IP addresses, or share data with third parties.
Server logs. Our hosting provider records connection-level metadata (IP, timestamp, requested path) for up to 30 days for abuse mitigation.
CSP violation reports. When your browser blocks a script under our Content-Security-Policy, it posts a structured report to /api/csp-report. Reports contain no personal data. Only the blocked resource URL and the page where the violation occurred.

Data we do not collect

We do not require accounts. There is nothing to sign up for.
We do not run third-party trackers, advertising pixels, or social-media embeds that contact external servers.
We do not collect health information. Do not send us medical details. Use this site for general orientation only and consult a licensed clinician for your situation.

Cookies

mmjnow.com sets no cookies of its own.

Cloudflare

Traffic to mmjnow.com passes through Cloudflare's content delivery network. Cloudflare may set its own challenge cookies (__cf_bm, cf_clearance) for bot mitigation. See Cloudflare's privacy policy.

We do not sell, rent, lease, or share personal information with any third party for monetary or other consideration. We do not run cross-context behavioral advertising and have no advertising partners.

Your rights

Because we do not maintain personal records linked to identifiable visitors, there is nothing in our systems to access, correct, port, or delete on your behalf. To the extent any privacy law nevertheless grants you rights with respect to data we may hold. Including the rights to know, access, correct, delete, port, restrict processing, object to processing, opt out of sale or sharing, and not be discriminated against for exercising any of these rights (those rights are honored without distinction by jurisdiction). If you have contacted us by email and would like that record removed, or wish to exercise any of the rights above, email [email protected]. We will respond within 30 days. We may ask you to verify the email address of record before acting; we will not require government identification.

Do Not Track

Some browsers send a Do Not Track ("DNT") or Global Privacy Control ("GPC") signal. Because mmjnow.com does not track visitors across services or sell personal information, these signals do not change our behavior. There is nothing additional to disable. We honor them by default.

International visitors

mmjnow.com is hosted in the European Union and served globally through Cloudflare's anycast network. Visitors outside the United States should understand that connection-level metadata (IP, timestamp, requested path) may transit and be briefly processed in multiple jurisdictions, including the United States, for routing and abuse mitigation. No personal records are retained.

Children

We do not knowingly collect personal information from children under 13, consistent with the Children's Online Privacy Protection Act (COPPA). If you believe a child under 13 has provided us information through email, contact [email protected] and we will delete it. mmjnow.com is otherwise intended for an adult audience.

Changes

We may update this policy as the site evolves. The "Last updated" date above will change accordingly. Material changes will be announced on the homepage for 30 days.

Contact

Privacy questions: [email protected].