Privacy policy
Last updated October 9, 2026
This policy describes what CloudedDeals, operated by Clouded Inc., collects when you use the website or the web app, why, who else sees it, and how long it is kept. It is written to describe what the product actually does. Where something is kept indefinitely, or where we cannot do something you might expect, it says so.
The short version
- There are no accounts for most people, and no payments. We never ask for a password or a card number, and we do not take payments. You buy from the dispensary, not from us.
- Your browser is given a random id. Almost everything we store is attached to that id rather than to your name.
- We do not sell your personal information.
- You can erase the random id and everything held on your device at any time by clearing site data in your browser. What that cannot reach is described in “Deleting your data” below, honestly.
- You must be 21 or older. The site is not intended for anyone under 21 and we do not knowingly collect their information.
1. What is stored on your device
This stays in your browser. It is not sent to us unless a section below says it is.
- A random id created the first time you visit. It is not derived from anything about you.
- Your approximate or precise location, only if you grant it. If you tap a button that asks for your location, the coordinates your browser returns are stored on your device so the feed can sort by distance. If you never grant it, we never have it.
- A ZIP code, if you type one, and the market and neighborhood you are browsing.
- The categories you picked during onboarding, the deals you saved or dismissed, and the brands or stores you follow.
- How you arrived — the link, campaign or referrer, and the ambassador code if you came through one.
- Whether you have passed the age gate, and your cookie choice.
2. What is stored on our servers
Attached to the random id, not to your name, unless you gave us a name or contact detail yourself:
- Which pages and deals you viewed, saved, dismissed or clicked through to, and when. This is how we tell whether the product is useful.
- Session records including the ZIP code you entered and how you first and most recently arrived.
- Searches you run, along with the market, neighborhood and category you were browsing, how many results came back, the general kind of browser (not the full browser string), and the page you searched from. Searches are linked to a scrambled form of your random browser ID, not the ID itself.
- Reports and feedback you send us, including anything you type into them.
- Push notification subscriptions, if you turn them on. See section 4 — this one deserves its own explanation.
Attached to you, because you provided it:
- An email address or phone number, if you join a waitlist, ask to be told when we reach your area, or give one in order to save deals across devices.
- Name, email, phone and workplace, if you sign up to the budtender ambassador program. That information is readable only by our own administrative tools.
3. Who else sees it
We do not sell your personal information. These are the companies that process it on our behalf in order for the product to work:
| Who | What they handle |
|---|---|
| Supabase (United States) | Hosts our database. Everything in section 2 lives there. |
| PostHog (United States) | Product analytics. Receives the events in section 2, identified by the random id. |
| Netlify (United States) | Hosts the website, and keeps ordinary server request logs. Our analytics events reach PostHog through it, on this website's own address. |
| Your browser maker — Google, Apple, Mozilla or Microsoft | Only if you enable notifications. Explained in section 4. |
We may also disclose information if the law requires it, or as part of a merger or sale of the business. Deal posts we publish to social media contain no visitor information.
4. Push notifications
Notifications are off unless you turn them on, and nothing in this section applies until you do.
When you allow notifications, your browser issues a unique web address called an endpoint, together with two keys. Together these are a credential that lets us send a message to that specific browser on that specific device. We store them, along with your market, whether you have passed the age gate, how you installed the app, and any quiet hours you set.
The endpoint belongs to your browser maker, not to us. It points at Google, Apple, Mozilla or Microsoft, depending on the browser. That means enabling notifications necessarily tells that company that this site sends messages to your device, and every notification passes through them.
You can withdraw at any time by turning notifications off for this site in your browser settings, which permanently stops them, or by using the unsubscribe control in the app, which deletes the stored credential.
5. Cookies and similar technologies
We use browser storage for the items in section 1, and analytics for the events in section 2. You can block or clear these in your browser. Doing so will sign you out of your saved deals and reset your preferences, because they are stored there and nowhere else.
6. How long we keep it
Some of this is deleted automatically on a schedule. Some is not, and this section says which is which rather than implying everything expires.
| What | How long |
|---|---|
| Activity and page-view records | Deleted after 90 days |
| Searches you run | Deleted after 90 days |
| Deals you dismissed | Deleted after 14 days |
| Price history we collect about dispensaries | 90 days. Not personal information |
| Session records, saved deals, follows, feedback, push subscriptions, and any email, phone or ambassador details you gave us | Kept until you ask us to delete them, or until we no longer need them. There is no automatic expiry on these today. |
7. Keeping it safe
Personal details such as an email address, a phone number or an ambassador record are readable only by our administrative tools, which require a credential. No system is perfectly secure and we will not claim otherwise. If we discover that information has been exposed, we will say so.
8. Seeing or deleting your data
What you can do yourself, immediately: clearing site data in your browser erases everything in section 1, including the random id. After that, nothing new is linked to the old one.
What you can ask us for: email hello@cloudeddeals.com and we will delete what we can identify as yours. If you gave us an email address, a phone number or ambassador details, we can find those and remove them.
What we have to be honest about: most of the activity records in section 2 are attached to a random id held in your browser, not to an account. We have no way to confirm that a given id belongs to you, and neither do you once the browser has been cleared. If you want those records removed, send us the id while you still have it — otherwise the practical remedy is clearing site data, after which the old records expire on the schedule in section 6 and nothing further is added to them.
Depending on where you live, you may have additional rights to access, correct or delete personal information, and to be free from discrimination for exercising them. Email hello@cloudeddeals.com and we will tell you what we hold.
9. Age
CloudedDeals is for adults aged 21 and over in the markets we serve. We do not knowingly collect information from anyone under 21. If you believe a minor has given us information, email hello@cloudeddeals.com and we will delete it.
10. Changes to this policy
We will update the date at the top when this changes. If a change materially affects what we collect or who sees it, we will say so on the site rather than only editing this page.
11. Contact
Clouded Inc. — hello@cloudeddeals.com