Privacy Policy
Last updated:
Cult of Var is a cannabis strain lineage database. This policy explains what we collect, why, and what we do with it. It is short because we collect very little.
Who we are
Cult of Var is an independent project based in Oregon, United States. We are responsible for the personal information described in this policy. You can reach us at [email protected].
The short version
We do not use cookies. We do not track you across other websites. We do not sell or share your information. We do not run advertising. If you never submit a form, we never learn anything about you that could identify you.
What we collect
Site analytics. We use Cloudflare Web Analytics to understand how many people visit, which pages they read, and roughly where in the world they are. It is cookieless and does not fingerprint your device or follow you to other sites. We see aggregate patterns, not individuals.
Information you choose to give us. The site has three forms — corrections, bug reports, and general contact. What each collects:
- Corrections — the strain concerned (if any), what you believe is wrong, your proposed correction (for parentage, one or two parent names) and any further detail, an optional source URL, and your email address if you choose to provide one. Email is optional.
- Bug reports — the page address, what you saw, what you expected (optional), your browser and device (optional; pre-filled from your browser, and you can edit or clear it), and your email address. Email is required so we can follow up.
- Contact — your name, email address, a category and your message — all required, because a message with no way to reply serves nobody — and, for some categories, an optional organization name.
Spam protection. All three forms use Cloudflare Turnstile to distinguish people from automated submissions. Turnstile issues a short-lived token and may examine your browser environment to do so. It is designed not to track individuals across sites. Cloudflare's own privacy terms govern that processing.
Server logs. Our host, Cloudflare Pages, keeps standard request logs including IP addresses, for security and reliability. We do not analyse these and they are not linked to form submissions.
Why we collect it
Corrections improve the database. Bug reports let us fix what is broken — some faults are only visible to a human eye, which is exactly why the form exists. Contact messages let breeders, publications and others reach us. Analytics tell us whether anyone is reading.
That is all. We do not build profiles, and there is nothing here to sell.
How submissions are used
Corrections are reviewed by hand. They are never applied automatically. A correction may lead to a change in the database, and where it does, the claim is recorded with its source as every claim on this site is.
Your email address is not published. It is used to follow up on your submission and nothing else. We do not add you to a mailing list. If we ever start one, it will be something you opt into deliberately.
If your correction includes a public source, we may cite that source publicly. We do not attribute corrections to individuals by name unless you ask us to.
How long we keep it
Form submissions are kept while they remain useful for maintaining the database — a correction may be revisited when later evidence arrives, which is central to how the site works. Analytics data is retained by Cloudflare under their own schedule.
You can ask us to delete your submission and your email address at any time. Write to [email protected] and we will do it.
Who else sees it
- Cloudflare hosts the site, provides analytics and operates Turnstile.
- Supabase hosts the database where submissions are stored.
Both are service providers acting on our behalf. Neither is given your data for their own purposes. Nobody else receives it. We do not sell, rent or trade personal information, and we have never done so.
How we protect it
Submissions are stored in a private database that is not publicly accessible. Access is limited to the operator, connections to the site are encrypted, and email addresses are never displayed on the site. No system is perfectly secure, but we keep what we hold to a minimum, which is itself the best protection.
Do Not Track and Global Privacy Control
We do not track visitors across websites or over time, and we do not sell or share personal information. We therefore treat every visitor the same whether or not their browser sends a Do Not Track or Global Privacy Control signal. There is nothing for the signal to switch off.
Your rights
Depending on where you live you may have rights to access, correct or delete the personal information we hold, and to object to its processing. This includes residents of the European Economic Area and the United Kingdom under the GDPR, and residents of California under the CCPA and CPRA.
Because we collect so little, exercising these is simple: write to [email protected]. Tell us what you want and we will do it. We will not charge you and we will not make it difficult.
California residents: we do not sell personal information and do not share it for cross-context behavioural advertising, so there is nothing to opt out of.
Visitors in the European Economic Area and the United Kingdom. We process form submissions on the basis of our legitimate interest in maintaining an accurate database and responding to you. Where an email address is optional, we process it on the basis of your consent, which you can withdraw at any time by asking us to delete it. Analytics are processed on the basis of our legitimate interest in understanding whether the site is used, in a form that does not identify you. Our service providers may store or process data in the United States, relying on the safeguards they maintain for international transfers. You also have the right to complain to the data protection authority where you live.
Children
This site is intended for adults of legal cannabis age in their jurisdiction. It is not directed at children and we do not knowingly collect information from anyone under 18. If you believe a child has submitted information, write to us and we will delete it.
Changes
If this policy changes we will update the date at the top. Material changes will be noted on the page rather than made quietly.
Contact
Questions about this policy, or requests about your information: [email protected]