Privacy

blunt is a personal cannabis journal at tryblunt.app for adults 21 and over. It is not a dispensary, marketplace, or delivery service. We do not sell cannabis, take orders, or process payment for flower. Shop cards are a directory only.

The age gate only asks if you are 21 or older. We save that as a cookie (blunt_21) so you are not asked every visit.

What we store

If you create an account we keep your email, password hash (never the password itself; or a Google / X sign-in id if you use those), whether that email is verified, display name, unique handle, bio, avatar, home city, taste (how you sesh), favorites, and whether you are an admin. Verify and password-reset mail comes from hello@tryblunt.app. Reset links expire in an hour; verify links last a day.

Sessions you log include the strain (flower, joint, or edible), how it felt (1 to 5), notes, the date, optional time, optional place and map pin, an optional nickname for that place, who you tagged, photos, likes, and whether the session is public or private. Product pages can have your private notes plus optional public star ratings and review blurbs. Chats with friends store the message text and any strain you shared from a product page.

Custom strains you add are available for everyone to log. The same name, brand, and form (flower / joint / edible) is one strain. We don’t keep duplicates. Admins can approve or remove community strains. We host the app on Vercel and store account data in Postgres (Neon).

Location

Location is optional. Turning on “use my location” asks the browser for a GPS fix so we can list licensed shops within about 10 miles. That coordinate is sent once to look up shops (our catalog plus OpenStreetMap / Photon) and kept on your device for about 30 minutes. We do not background-track you, and we do not attach that GPS fix to your account.

A session place is stored only if you add one while logging. Search, tap the map, use current location, or skip it. You can nickname the place; the pin still sits on the real spot, and you see the nickname on your session. You always see your own exact place and pin. Friends looking at a public session see the nickname if you set one, otherwise the city name. They never get the street, venue, or map pin. If we can’t tell the city, they see “Somewhere.” Map tiles load from OpenStreetMap / CARTO when you open a map. Directions to shops open Apple Maps or Google Maps on your phone.

Who can see what

Each session is public or private. You pick that at the top of Log a session and can change it later when you edit. Public sessions: friends you accept can see them (city or nickname, not the pin), like them, and they show on your profile and on Home friend activity. Private sessions stay on your stash only. Friends never see them, can’t open them, and can’t like them. Session pages say “Session · public” or “Session · private.”

Friends can also see your profile, how you sesh, and public friend count. They cannot see your private product notes. Public reviews on a strain are visible to signed-in users. Messages stay between the two of you until someone unfriends. That deletes the thread. Session likes show a count, not a public list of names. Strains in the catalog are the same for everyone; they are not filtered by where you are.

Photos are compressed images attached to a session. Don’t upload anyone who hasn’t agreed to be in the shot.

Health data

Sessions, mood, notes, optional place, photos, favorites, reviews, and how you sesh can count as consumer health data under Washington’s My Health My Data Act. We ask before we keep a journal. We do not sell or share that data for advertising. You can withdraw by deleting your account on You, or email hello@tryblunt.app.

Cookies

We use a session cookie (or equivalent token) to keep you signed in, the 21+ cookie so you are not asked your age every visit, and a journal-consent cookie. We ask once about cookies. Those are how the journal works. We do not sell personal information, we do not “sell or share” it under CCPA, and we do not run advertising networks.

Deletion

You can delete your account from You. That removes your profile, sessions, photos, favorites, reviews, likes, messages, and friend ties. Or email hello@tryblunt.app. More on Support · Terms.