Privacy Policy

Account information. When you sign up we collect your email address and a hashed password. We do not collect your name, address, or phone number.

Payment information. Payments are processed by Stripe. We store only a Stripe customer ID and subscription status — we never see or store your full card number, expiry, or CVV.

Age verification. We record that you confirmed being 21 or older when you acknowledged our age gate. We do not collect or verify a government-issued ID.

Usage data. We log standard server-side request data (page visited, timestamp, IP address) for security and abuse prevention. We do not use third-party analytics trackers (no Google Analytics, no Meta pixel).

Community content. Ratings and reviews you submit are stored and displayed publicly on the product page you reviewed.

Watchlist. The cigars you add to your watchlist are stored in our database to power restock and price-drop alerts.

• To provide and maintain your subscription and account.
• To send you restock and price-drop alerts you have opted into via your watchlist.
• To send transactional emails (account confirmation, billing receipts, material policy updates). We do not send marketing emails unless you opt in.
• To detect and prevent fraud or abuse.
• To comply with legal obligations.

We do not sell your personal information to third parties. We do not use your data to build advertising profiles.

We share data with the following third parties only to the extent necessary:

• Stripe — payment processing. Your payment data is governed by Stripe’s Privacy Policy.
• Supabase — our hosted database and authentication provider. Data is stored in the United States.
• Postmark — transactional email delivery (alerts and receipts).
• Vercel — website hosting and edge network.

We do not share your information with tobacco retailers or affiliate networks beyond the anonymous click-through that occurs when you follow a link to a retailer site.

We use a single session cookie issued by Supabase Auth to keep you logged in. We do not use advertising cookies or cross-site tracking cookies. Your age-gate confirmation is stored in your browser’s local storage on the device you used.

We retain your account data for as long as your account is active. If you delete your account we will delete your personal data within 30 days, except where retention is required by law (e.g. billing records, which we keep for 7 years per standard accounting practice). Public reviews you posted may remain visible but will be anonymised upon account deletion.

You have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate data.
• Request deletion of your account and associated personal data.
• Opt out of alert emails at any time from your account settings.

To exercise these rights, email legal@thecigarcommunity.com. We will respond within 30 days.

Our service is restricted to users 21 and older. We do not knowingly collect information from anyone under 21. If you believe a minor has created an account, please contact us and we will delete it promptly.

We use industry-standard measures including TLS encryption in transit, hashed passwords, and row-level security on our database. No method of transmission or storage is 100% secure; we cannot guarantee absolute security.

We may update this Privacy Policy from time to time. We will notify subscribers by email before material changes take effect. The effective date at the top of this page reflects the most recent revision.

Privacy questions or requests: legal@thecigarcommunity.com