Privacy Policy

Cannatype.org and Dr. FrankenWeed's Monster Detection Laboratory · Effective October 1, 2026

This policy explains what we collect when you use Cannatype, our dispensary demo sites, the COA library, or Dr. FrankenWeed's Monster Detection Laboratory. It covers certificate uploads, messages, technical data, analytics, and the choices available to you.

1. Who we are

These services are operated by Cannabis Chemotype Analysis, LLC. The sites provide educational analysis of publicly available cannabis certificates of analysis (COAs), registry records, and dispensary menu data. They do not sell cannabis and do not provide medical, legal, or professional advice. Contact us through the feedback form.

2. Information we collect

• Certificates you upload or scan. The PDF, image, extracted values, batch or product identifiers, and any information visible in the document.
• Messages and feedback. Your email address, message, and any information you choose to include.
• Usage and technical data. Page path, referrer, coarse device type, timestamps, error and security logs, IP address or network data, and aggregate analytics.
• Preferences and local storage. Age-gate choices, consent settings, display preferences, and similar browser-storage items.
• Third-party data. Public registry records, COAs, menu data, and metadata received from government, laboratory, dispensary, or platform sources.

3. How we use information

• Read, organize, match, display, and improve COA data and product analysis.
• Respond to feedback, corrections, removal requests, and support messages.
• Operate, secure, debug, measure, and improve the sites.
• Prevent abuse, fraud, scraping, or interference and comply with law.
• Send requested service or educational communications and honor privacy choices.

4. Uploaded certificates and public display

If you upload or scan a certificate, you confirm you have the right to share it. The certificate and extracted data may be stored, reviewed, matched to products, and shown to other users. Please redact names, addresses, signatures, or other personal information before uploading unless it is necessary and you have authority to share it. We may remove a document on a good-faith request from a rights holder or authorized person.

5. Artificial intelligence and third-party services

We use software and artificial-intelligence systems to extract values, match records, identify patterns, and generate analysis. AI can misread a certificate or produce incomplete or incorrect output. Data may be processed by hosting, analytics, document-storage, safety, support, and cloud providers, including Cloudflare and model or processing vendors. We do not sell personal information or use uploaded certificates for third-party advertising.

6. When we share information

We may share information with service providers; with a rights holder or authorized requester reviewing a certificate; with professional advisers; with authorities when required by law or necessary to prevent harm or abuse; and as part of a merger, financing, reorganization, or sale of assets. Public registry and menu information may be displayed as part of the service.

7. Retention and removal

We keep uploaded certificates, messages, and technical records only as long as reasonably needed to operate the service, match products, maintain an educational archive, resolve requests, prevent abuse, and meet legal obligations. You may request correction or removal through the feedback form. We may retain a limited record of the request or a de-identified version where necessary for integrity, legal compliance, or abuse prevention.

8. Your choices and rights

Depending on your location and our role, you may request access, correction, deletion, restriction, portability, or an objection to certain processing, and may withdraw consent where consent is the basis. Do not submit sensitive medical, financial, or government-identifier information. We may need to verify identity or authority before acting on a request.

9. Cookies and analytics

We use limited first-party storage for age gating, preferences, security, and consent. Cloudflare Web Analytics and similar operational tools are designed to provide aggregate traffic and performance data without advertising profiles. See the Cookie Policy.

10. Security, children and international processing

We use reasonable safeguards, but no system is perfectly secure. The services are intended for adults 21+ or registered medical cannabis patients and are not directed to children. Information may be processed in countries other than your own; where required, we use contractual or other safeguards for cross-border transfers.

11. Changes and contact

We may update this policy as the service or law changes. The effective date above shows the current version. Questions, corrections, and removal requests may be sent through the feedback form.

This policy is a plain-language disclosure and does not replace the Terms & Conditions or any rights you have under applicable privacy law.

Additional privacy rights and disclosures

• No sale or behavioral advertising. We do not sell personal information or share it for cross-site behavioral advertising.
• Requests. Depending on location, you may request access, correction, deletion, portability, restriction, or objection, and withdraw consent.
• Authorized agents and appeals. You may use an authorized agent where law permits. If a request is denied and law provides an appeal right, you may appeal. We do not retaliate for exercising privacy rights.
• Verification and exceptions. We may verify a request and may deny or limit it where law, security, fraud prevention, legal claims, or another person's rights require.
• Automated processing. We use automation and AI for analysis and recommendations, but do not make solely automated decisions with legal or similarly significant effects without human involvement or another lawful basis.
• Business transfers. Information may transfer in a merger, financing, reorganization, bankruptcy, or sale of assets, subject to this policy and law.
• Aggregated and de-identified data. We may use aggregated or de-identified information for research, analytics, security, and improvement.