Privacy policy

What we collect

What you give us:

• Account: your email address and a password (stored only as a secure hash), or your Google or Apple account ID if you sign in with them.
• Your activity in your account: deals you save or like, shops and brands you follow, price alerts, your deal votes and your email and notification settings.
• Newsletter: your email address, if you subscribe.
• Contact form: your name, email and message.

What is collected automatically

• Usage: pages visited, taps on deals and “Shop” buttons, device and browser type, approximate location from your IP address, and how you got here. Through Google Analytics and our own counts.
• Session recordings and heatmaps: Microsoft Clarity records clicks, taps, scrolling and mouse movement on public pages so we can see where the site is confusing. It hides what you type into forms. It is paused on the account, admin and doctors pages and never records them.
• A random device ID stored on your phone or computer, used to count app opens without knowing who you are.
• Error reports: if a page breaks, a technical report (browser, page and error) goes to our error reporting service so we can fix it.
• Location: only if you tap “Near me” and your browser asks and you allow it. It is used in your browser to sort deals and shops by distance and is not saved to your account.

How we use it

• To run your account and show your saved deals, follows and alerts.
• To send the emails and notifications you turned on (price alerts, new deals from shops you follow, the newsletter) and account emails such as password resets.
• To understand how the site is used and improve it.
• To keep the site secure and stop abuse, such as repeated failed sign-ins.
• To report to dispensaries how many people tapped through to them, as totals only, never who.

Who else handles it

We use trusted third-party services to run FindMari: hosting, network security, our database, email delivery, usage analytics, error reports, and sign-in with Google or Apple if you choose it. They process data on our behalf and only to provide those services to us.

What we do not do

• We do not sell or rent personal information.
• We do not give your information to dispensaries or brands.
• We do not ask for or store medical records or your state medical marijuana card.

Your choices

• Turn off emails and notifications at any time from your account, the unsubscribe link in any email, or your browser’s settings.
• Ask us for a copy of your data, to correct it, or to delete your account and everything tied to it, through our contact page. We reply within 30 days.
• Block or delete cookies and local storage in your browser. The site still works without an account.
• Opt out of Google Analytics with Google’s browser add-on, and see Microsoft’s privacy statement for Clarity.

How long we keep it

Account data stays while your account is open and is deleted when you ask us to delete the account. Contact messages are kept as long as needed to answer them. Analytics data is kept for the period set in those tools (up to 14 months for Google Analytics and about 13 months for Clarity).

Security

Passwords are stored as secure hashes, connections are encrypted (HTTPS), and access to our database is restricted. No system is perfectly secure, so please use a password you do not use elsewhere.

Adults only

FindMari is meant for adults 18 and over. We do not knowingly collect information from anyone under 18. If you think a minor gave us information, contact us and we will delete it.

Changes

If we change this policy, we update the date at the top. Important changes will also be shown on the site or emailed to account holders.

Contact

Questions about your privacy, or want your account deleted? Write to us through the contact page.