Privacy Policy

1. Overview

Cigarnal (“we”, “our”, “us”) is committed to protecting your privacy. This Privacy Policy explains what information we collect, how we use it, and your rights regarding that information. By using the Platform, you agree to the practices described in this policy.

2. Information We Collect

We collect the following categories of information:

• Account information — email address, username, and optional profile details (avatar, bio) provided during registration or onboarding.
• Usage data — smoking sessions, humidor contents, ratings, notes, and other content you voluntarily submit.
• Technical data — browser type, IP address, and basic usage analytics to help us maintain and improve the Platform.
• Communications — any messages or feedback you send to us.

3. How We Use Your Information

We use your information to:

• Provide, operate, and maintain the Platform
• Authenticate your identity and secure your account
• Display your profile and content to other users according to your privacy settings
• Send account-related communications (e.g. password resets)
• Improve and develop new features for the Platform
• Comply with legal obligations

We do not sell your personal data to third parties and do not use it for advertising purposes.

4. Privacy Controls

The Platform gives you control over the visibility of your content. Humidors, sessions, and posts can be set to private, friends only, or public. Private content is visible only to you. We honour these settings throughout the Platform.

5. Data Storage & Security

Your data is stored using Supabase, a cloud database provider, on infrastructure located within jurisdictions with appropriate data protection standards. We implement industry-standard security measures including encrypted connections (TLS), row-level security policies, and authenticated access controls. No method of transmission or storage is completely secure, but we take reasonable steps to protect your information.

6. Cookies & Local Storage

We use browser local storage to remember your age verification confirmation and session preferences. We may use essential cookies for authentication purposes. We do not use tracking cookies or third-party advertising cookies.

7. Third-Party Services

We use a limited number of third-party services to operate the Platform, including Supabase (database and authentication) and Cloudflare (hosting and security). These providers process data only as necessary to deliver their services and are bound by their own privacy policies.

8. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your account and associated data
• Object to or restrict certain processing of your data
• Receive a copy of your data in a portable format

To exercise any of these rights, please contact us through the Platform. We will respond within a reasonable timeframe.

9. Data Retention

We retain your data for as long as your account is active. If you request account deletion, we will remove your personal data within a reasonable period, except where we are required to retain it by law.

10. Children’s Privacy

The Platform is strictly for adults of legal tobacco-consumption age. We do not knowingly collect personal information from minors. If you believe a minor has registered on the Platform, please contact us and we will promptly remove the account.

11. Changes to This Policy

We may update this Privacy Policy periodically. We will notify users of material changes via the Platform. Continued use of the Platform after changes are posted constitutes acceptance of the updated policy.