Privacy Policy

The short version

THC513 is a cannabis deal aggregator for adults 21+ in Ohio. We collect the bare minimum needed to show you relevant deals, send the newsletter you asked for, and run the chatbot. We don’t sell your data. We don’t track you across other sites. If you want out, the account page has a delete button — and your records actually leave the database.

Who we are

THC513 (“we,” “us”) operates thc513.com, a website that aggregates publicly posted cannabis dispensary prices in Ohio. We are not a dispensary, not affiliated with any dispensary, and we do not sell cannabis.

What we collect

Account information

When you create an account, we store your email address, a hashed version of your password (we never see the plaintext), your name if you provide one, your selected subscription tier, and a timestamp.

Preferences

Pro subscribers can save a default ZIP code, search radius, and home metro. Digest and free-tier subscribers can save a home metro. These are used to personalize the deals page, the chatbot, and your newsletter. ZIP codes are resolved to latitude/longitude at query time and are not shared with third parties.

Usage data

We run self-hosted Umami analytics to track page views, referrer domains, and aggregate device info (desktop vs. mobile). Umami does not set identifying cookies or track you across other websites.

Chat history

If you use PotBot, your messages and the bot’s responses are stored so we can support conversational follow-ups (“what was that third one again?”). You can clear your chat history from the chat page at any time.

Alerts

If you set a price alert, we store the criteria you entered (brand, strain, price threshold, etc.) until you delete it.

Email activity

We log when we send you an email so we don’t accidentally send the same digest twice. We do not track opens or clicks inside your emails.

Browser storage (localStorage)

THC513 uses your browser’s localStorage for a few things, all on your device only — never sent to us as a separate tracker:

• Auth token (token + user) — keeps you signed in across visits. Cleared when you log out.
• Age verification(thc513.ageVerified.v1) — remembers that you confirmed you’re 21+ so you don’t see the gate again.
• UI preferences — last-used ZIP / radius on the deals page, dismissed welcome banners.

Clearing your browser’s site data clears all of the above and logs you out.

What we do with it

• Show you deals that match your location and preferences.
• Send the newsletter and alert emails you signed up for.
• Run the PotBot chatbot and let follow-up questions reference prior turns.
• Investigate site abuse, rate-limit violations, or security incidents.
• Aggregate anonymous statistics about which features people use.

We do not sell, rent, or share your data with advertisers, data brokers, or dispensaries.

Third parties that process data on our behalf

• Resend — sends our transactional and newsletter emails. Your email address is shared with Resend for this purpose only.
• OpenRouter — routes your chat messages to a language model. Messages are used only to generate a reply for you in the current session.
• Stripe (when subscription billing launches) — handles payment details. We never see or store your card number; we only record that your subscription is active.

Cookies and local storage

We use a small number of functional cookies and localStorage entries to keep you signed in, remember your deal-filter preferences for the current session, and record that you’ve confirmed you’re 21+. We do not use advertising or tracking cookies.

Your choices

• Correct your data. Update your email, preferences, and alerts from /account at any time.
• Delete your account. From /account, request account deletion. We hard-delete your user record and cascade deletion to your alerts, chat history, and send logs. Aggregate analytics that cannot be tied to you (e.g. page-view counts) are retained.
• Unsubscribe from emails. Every newsletter has an unsubscribe link. You stay signed up for transactional emails (verify, password reset) as long as you have an account.
• Export your data. Email hello@thc513.com and we’ll send back the data we have on file within 30 days.

California / CCPA

California residents have the right to know what personal information we hold about them, to have it deleted, and to opt out of its sale. We don’t sell personal information. Use the “Export your data” or “Delete your account” options above to exercise these rights.

Kids

THC513 is for adults 21 and older. We do not knowingly collect information from anyone under 21. If we learn that we have, we’ll delete the account.

Changes

When we update this policy, we’ll change the “Last reviewed” date at the top of this page. Material changes (new data collection, new third-party sharing) will also get called out in the newsletter.

Contact

Questions? Email hello@thc513.com.