Privacy Policy
Last updated · February 2026
What we collect
Anonymous visitors: aggregate analytics, IP, user-agent, search terms. Signed-in consumers: email, name, picture (if you sign in with Google), and your saved favorites. Sales-alert subscribers (no sign-in required): email and an optional ZIP — never your name, phone, address, date of birth, MMJ card, or any health information. Dispensary owners: email, business name, addresses, phone, and the menu data you upload.
Sales-alert subscriptions
If you opt in to sales alerts from the home page or footer, we store only your email and (optionally) your ZIP. We log the IP address you submitted from solely as proof of consent under the federal CAN-SPAM Act, and never expose that IP in any export or share it with any third party. Sales-alert emails will include the sender's physical mailing address and a one-click unsubscribe link, as required by CAN-SPAM. We will never tie your email to specific products you viewed, dispensaries you favorited, or purchases (we don't see purchases — Bud Link is not a dispensary). Unsubscribe at any time by clicking the link in any email or by emailing BudLink@LinkLitePro.com — we honor requests within 10 business days.
What we deliberately don't collect
Bud Link is a search directory, not a dispensary. We do not collect Pennsylvania medical-marijuana card numbers, prescriptions, diagnoses, purchase history, consumption data, dates of birth (beyond the 21+ age gate), real-world addresses, or phone numbers from consumers. If a feature would require any of those, it is not built.
Why we collect what we do
To run the search engine, personalize results by location and saved favorites, prevent abuse, send sales alerts you opted in to, and bill paid placements. We do NOT sell your data.
Location
Location is shared only when you tap "Use my current location" or set a ZIP. We never read your GPS in the background.
Children
Bud Link is strictly for adults 21+. We do not knowingly collect data from anyone under 21. If we discover such data we delete it.
Third parties we share with
Stripe (payments — dispensary subscriptions only), Mapbox (map tiles), PostHog (anonymous product analytics), Google (only if you choose "Sign in with Google"). Sales-alert emails are stored in our database; if and when we begin sending them, the email service we use (e.g. Resend, Mailchimp) will be added here. No other third-party sharing. We never sell or rent your email.
Your rights
Email BudLink@LinkLitePro.com to access, correct, or delete your data. We respond within 30 days. California, Virginia, Colorado, and Connecticut residents have additional rights under their state privacy laws.
Cookies
We use one session cookie for sign-in (httpOnly, 90-day expiry) plus PostHog product-analytics cookies. No third-party ad cookies.
Security
Passwords are bcrypt-hashed. API tokens are short-lived JWTs. Payment data lives at Stripe — we never see your card number.
Changes
We will email signed-in users and active sales-alert subscribers at least 14 days before any material change to this policy.