Privacy Policy
What we collect, who else touches it, how long we keep it, and how to get it out or get it deleted.
Who we are
CigarCabinet is operated by CigarCabinet LLC. For any privacy question, including a request to access or delete your data, contact support@cigarcabinet.app.
What we collect
Account
Your email address, and a username, display name and avatar if you set them. Authentication is handled by Clerk; we never see or store your password.
What you enter
Your inventory and humidors, purchase prices and dates, smoke log entries with ratings and flavour notes, wishlist, photos you upload, and any posts, comments and likes you make on the feed.
Venue tags
If you tag a post with a place, we store the name you typed or selected and, when you pick from the suggestion list, the corresponding Google Place ID. We do not request or store your device location. The app never asks for geolocation permission, and its browser policy header blocks the API outright.
One narrow exception, which is not stored: when you use the venue suggestion box, our server passes an approximate city-level location derived from your IP address to Google Places so results are ranked near you rather than near our datacentre. It is used for that one request, is never written to our database, is never returned in a response, and is never attached to a post.
Usage and signup attribution
We record first-party product events (for example, that an import ran or a post was created) to understand how the app is used. At signup we store where you came from — UTM parameters and the referring site, if any. We use no third-party advertising or cross-site tracking.
Diagnostics
When something errors we record the error and its technical context through Sentry so it can be fixed.
Who processes it for us
We use a small number of providers, each for a stated purpose and none for advertising:
- Clerk — authentication and account identity.
- Neon — the database your data lives in.
- Netlify — hosting and the application API.
- Stripe — subscription payments. Card details go directly to Stripe; we never receive or store them.
- Cloudinary — storage and delivery of photos you upload.
- Resend — sending the emails you have opted into.
- Google Places — venue name suggestions, as described above.
- Sentry — error diagnostics.
What other people can see
Your inventory, smoke log, ledger and insights are private to you.
Anything you post to the feed — its text, photo, venue tag, your rating of that cigar, and your username and avatar — is visible to other signed-in members. There is no post editing, so correcting a post means deleting and reposting it.
Community rating averages include your ratings only if you opt in, in Settings. They are shown only as aggregates across users, never attributed to you individually. Opting out takes effect immediately.
We send a welcome email, and the newsletter and reminders you have opted into. Every one carries an unsubscribe link that works without signing in, and you can change your preferences in Settings at any time. Essential account and billing messages are not marketing and cannot be switched off while your account is open.
How long we keep it
We keep your data for as long as your account exists. When you ask us to delete your account we remove your personal content; anonymised aggregates, and records we are required to keep for legal, tax or accounting reasons, may persist. Backups age out on their own schedule.
Your rights
You can ask us to give you a copy of your data, correct it, or delete it, and you can withdraw consent for optional processing such as community rating aggregates or marketing email. Depending on where you live you may also have the right to object to or restrict processing, or to complain to your data protection authority. Email support@cigarcabinet.app and we will respond within the period your law requires.
We do not sell personal information, and we do not share it for cross-context behavioural advertising.
Children
CigarCabinet is for adults 21 and over. It is not directed at children and we do not knowingly collect their data. If you believe a minor has created an account, contact us and we will remove it.
Changes
If we change this policy materially we will notify you in the app or by email before it takes effect, and the version number at the top of this page will change.