Privacy

The short version

• No accounts. There is no profile, no password, and nothing to sign up for.
• No email list. We do not collect your address to send you marketing. If you mail us, we reply and then keep the thread so we have the context.
• No analytics sold. We do not sell data, and we do not run third party advertising or tracking scripts.
• Your shipping address stays off the chain. It is emailed to us so a parcel can be sent. It is never written to a blockchain, never attached to a certificate, and never shown on this site.
• Onchain activity is public. Anything you sign is visible to everyone, forever, whether or not we have anything to do with it.

1. What this site records

When you connect a wallet, your wallet address is visible in your own browser. We do not ask you to sign in, and we do not build a profile of you from it.

The public pages on this site read the blockchain to show you facts, such as how many certificates exist or who holds a piece. That data is already public and we are only displaying it. When you buy something, the transaction, the amount and your address are recorded on Robinhood Chain, chain id 4663, and we link to the transaction hash so you can check it yourself rather than trusting our record.

Our hosting provider keeps ordinary server logs, such as an IP address, a timestamp and the page that was requested, in order to keep the site running and to investigate faults. We do not use those logs to build a profile of you.

2. Shipping details

If you are buying a specimen that ships inside the United States, you email your name and shipping address to cannafirm@gmail.com. We need that address to send a parcel, and we need nothing else. It is not used for anything except shipping and the reply to your email.

That address is never written onchain. Putting an address on a public blockchain would publish it to everyone, permanently and irremovably, so we do not do it and never will. It stays in ordinary email.

3. What is never written to the blockchain

A public blockchain cannot be corrected or deleted by us, or by anyone. So we only put things there that are meant to be public. Specifically, none of the following is ever recorded onchain:

• Your name, your email address, or any contact detail.
• Your postal or shipping address.
• Any document, photo or identity check.
• Anything you have not deliberately signed yourself.

4. What a blockchain makes public, and what we cannot undo

When you sign a transaction, your wallet address, the contract, the amount and the time are written to the chain. Anyone can read that, forever. It cannot be deleted, and it cannot be made private after the fact. This is a property of the network, not a choice we made, and it applies to every participant on that network.

Practically, that means your holding history is visible. If you would rather not be publicly associated with a wallet, do not buy with a wallet you want to keep private. We will not ask you for a name to put onchain, because you are not required to give one.

5. Cookies and local storage

This site does not set advertising or tracking cookies. A small number of things are stored in your own browser, on your own device, and are never sent to us:

• Your light or dark interface choice.
• Whether you have seen the tutorial or accepted the notice.
• Progress in the play surfaces on this site, such as the dig and the clicker. That progress is local to your browser and is not transmitted or stored on a server.

6. Services we do not control

This site links to third parties, including blockchain explorers, NFT marketplaces, the wallet software you use, the stablecoin issuer behind USDG, and the hosting and font services that deliver the pages. Each of those has its own privacy policy and its own view of your data.

We cannot see or control what they collect, and following a link to them puts your address and your IP address in front of them. Read their policies if that matters to you. A careful habit is to interact with this project only through the domains we publish, and to check the address in your bar. Our safety page lists every contract address we use so a copy is easier to spot.

7. Children

This site is not directed at children, and we do not knowingly collect personal information from anyone under the age of majority where they live. If you think a child has sent us personal information, email cannafirm@gmail.com and we will deal with it.

8. How long we keep things

Email threads are kept for as long as needed to deal with your purchase or question, and to keep a record of what was agreed about a shipment. We do not keep a marketing list, because we do not have one. Server logs are kept for a short period and then discarded by the provider.

Onchain records are not ours to keep or delete. They belong to the network and they stay public.

9. Your choices

• Ask what we hold about you, and we will tell you in writing.
• Ask us to correct or delete something we hold in an email, and we will do it, subject to any record we need to keep for tax or shipping purposes.
• Ask us to stop corresponding with you, and we will.
• Use a different wallet, or a fresh browser profile, if you want a clean start. That is entirely within your control.

One limit worth stating plainly: we cannot delete a transaction from a blockchain, because nobody can. If you want less of your history public, the only real control you have is whether you sign the transaction.

10. Security

No system is perfectly secure, including ours. We keep what we hold to a minimum and we do not store seed phrases or private keys, because we never ask for them and have no use for them. Most losses in this space come from phishing, not from a breach here.

We will never message you first, and we will never ask for your seed phrase. Anyone who does is not us. Read our safety page before connecting a wallet to anything.

11. Changes to this page

This page may change as the project does. The date at the top is the last change. If we ever begin collecting something new, we will say so here rather than quietly changing our practice. Questions go to cannafirm@gmail.com. The terms of use cover the commercial side.