Legal
Privacy Policy
Last updated October 9, 2026
Gibby's Garden LLC, doing business as Gibby's Craft Cannabis ("Gibby's", "we"), runs gibbysgarden.com. The short version: we don't track you, we don't sell anything about you, and we only keep what you give us for a reason you can see.
The short version
- No third-party trackers. No ad pixels, social widgets or third-party fonts, and no request from your browser to anyone else's analytics. Our fonts and scripts come from this site, and blog images from this site or Kief Studio's own image server (cdn.kief.dev).
- No cookies for visitors. The site sets a cookie only when you sign in to the budtender program or the partner portal.
- Your location stays on your phone. "Use my location" sorts stores inside your browser. We never see or store where you are.
- Email only with your yes, twice. Drop alerts start only after you confirm from your inbox, and every email unsubscribes in one click.
What we collect, and why
- Your 21+ answer. Stored on your own device (browser storage), so we don't ask again. It never reaches our server.
- Drop alerts. Your email address, the strains or stores you picked, and a record of your consent: the words you agreed to, where you signed up, and when you confirmed. No name, no phone number, no location. If you never confirm, the request is deleted within about three days.
- Reviews. Your ratings and comments, plus a name, email or phone only if you choose to add them, used only to reply about that review. A person reads every review before its rating or words appear on a strain page. We never publish names, and we don't publish anything about health or medical effects.
- Wholesale applications and contact messages. What you put in the form, so we can answer you.
- Budtender and partner accounts. Your email, your name, your store, and what you do in the program (points, training, order requests). Partner accounts only ever see their own store's numbers.
- Server logs. IP address, browser, the page you asked for, and the page you came from, kept up to 30 days for security. If you pick a town on the store finder, the town name is in the page address and lands in these logs; we don't link it to you.
- Visit counts. Kief Studio, who runs the site for us, measures visits with its own cookieless analytics, served from this site. It uses a random id that lives only in your browser tab and ends when you close it: no cookies, no fingerprinting, nothing that follows you across sites or visits. It records pages, scrolling and time on page, plus your country (not your IP address). If your browser sends Do Not Track or Global Privacy Control, it doesn't run at all.
Who else is involved
- Cloudflare sits in front of the site for security and speed, so it handles every request. It can run a bot check in your browser, and on forms it can show its Turnstile challenge.
- Store maps are drawn from map data we host ourselves (© OpenStreetMap contributors, via Protomaps), so loading a map doesn't contact anyone else.
- Store websites, Google Maps and social sites only when you click a link to them ("Order on their site", "Directions", Instagram). Their own privacy policies apply from there.
- Our email provider and Kief Studio, who run the site, its email and its visit counts for us, under the same rules as this page.
- The Massachusetts Cannabis Control Commission or law enforcement, only if the law requires it.
We don't sell, rent or trade personal information, ever.
Cookies
Browsing the site sets no cookies. Signing in to the budtender program or the partner portal sets one cookie that keeps you signed in; signing out removes it. Cloudflare may set a short-lived security cookie when it checks for bots.
Your rights
- See what we have about you, and correct it.
- Delete it. For drop alerts, that removes your address, your choices and your consent record together. Regulated records (wholesale orders) are kept as long as Massachusetts law requires.
- Stop any email: one click in the email, or write to us.
Email [email protected] and we'll answer within 14 days.
How long we keep it
- Drop alerts: until you unsubscribe. Unconfirmed sign-ups: about three days.
- Reviews: as long as they're useful on the site; ask us and we'll remove yours.
- Wholesale applications: while you're a partner, plus seven years for Massachusetts records.
- Email correspondence: up to three years.
- Server logs: 30 days.
Age and minors
This site is intended for adults 21 years of age or older. We do not knowingly collect information from anyone under 21. If you believe we have collected information from a minor, email us immediately and we will delete it.
Changes
When this page changes, the date at the top changes. If a change affects drop alerts, we'll tell subscribers by email.
Contact
Gibby's Garden LLC
Uxbridge, Massachusetts
MA CCC License MB281347
[email protected]
This policy is provided for informational purposes and does not constitute legal advice. Consult an attorney for legal questions specific to your situation.
