This Privacy Policy explains what personal information [COMPANY LEGAL NAME] (“Crushed”) collects when you use crushed.app, how we use and share it, and the choices you have. Crushed is only for adults 21 and older; we don’t knowingly collect information from anyone under 21.
What we collect
Information you give us
- Account details: email, username, password (stored hashed), and date of birth when you create a Stash account (used to confirm you’re 21+).
- Profile and content: what you add to your profile or creator page — name, handle, bio, avatar, location, social links, videos, posts, live streams and comments.
- Requests and claims: when you request a Studio invite or claim a brand, dispensary or creator page — your name, email, phone (optional), role, socials and any message.
- Creator details: your acceptance of the Creator Agreement (version and time) and, if you add one, a payout email.
- Messages: what you send to us or through the Service’s inboxes.
Information collected automatically
- Device and usage data: IP address, browser and device type, pages viewed, referring pages, and timestamps, mostly from server logs.
- Cookies: small files that keep you signed in, remember your 21+ confirmation (
crushed_age_ok, 30 days) and your preferences, and help us measure traffic. See “Cookies” below. - Approximate location: derived from your IP address or the market you pick, to show local shops and drops. We don’t collect precise GPS location unless you choose to share it.
Information from others
Public posts from social accounts a creator links to their page, and product, menu and sales data from our data partners (this is business data, not information about you).
How we use it
- To run the Service: create accounts, publish pages and content, stream video, and show local information.
- To confirm age and eligibility, review invite requests and claims, and keep the Service safe — including moderating content, preventing fraud and abuse, and enforcing our Terms.
- To send transactional emails: confirmations, invite and claim updates, security notices. We send these even if you’ve opted out of marketing.
- To understand and improve the Service.
- To comply with the law and respond to lawful requests.
We don’t sell your personal information, and we don’t use it for cross-site targeted advertising.
Who we share it with
- Everyone, if you make it public: creator pages, public profiles, posts and live streams are visible to anyone.
- Service providers who process data for us under contract — for example hosting (Vercel), database (Supabase), video storage and delivery (Cloudflare R2 and our media servers), and email (Resend).
- Legal and safety: when required by law, to respond to valid legal process, or to protect the rights, safety and property of Crushed, our users or the public — including reports to the National Center for Missing & Exploited Children where required.
- Business transfers: if Crushed is involved in a merger, acquisition or sale of assets, subject to this Policy.
Cookies
We use essential cookies (sign-in sessions, the 21+ confirmation, security) and may use analytics to measure traffic. You can block or delete cookies in your browser; some features, like staying signed in, won’t work without them.
How long we keep it
We keep personal information while your account is active and as long as needed for the purposes above. Invite requests and claims are kept while they’re reviewed and for a reasonable period after. When you delete your account or content we remove it from the live Service and delete or de-identify it within a reasonable time, except where we must keep it for legal, safety or dispute reasons.
Your choices and rights
- Edit your profile and content, or delete them, from your account or Studio.
- Ask us to access, correct, delete or export your personal information by emailing [PRIVACY EMAIL]. We’ll verify your request and respond as the law requires.
- Depending on where you live (for example California, Colorado, Connecticut and other states with privacy laws) you may have additional rights, including to opt out of certain processing and to appeal a decision about your request. We won’t discriminate against you for exercising them.
- Unsubscribe from any non-transactional email using the link in it.
Security
We use reasonable safeguards — encryption in transit, restricted database access, and hashed passwords — but no system is perfectly secure. Keep your credentials and private links safe.
Under-21s
The Service isn’t for anyone under 21. If you believe someone under 21 has given us personal information, email [PRIVACY EMAIL] and we’ll delete it.
Changes
We’ll post any changes here with a new effective date, and give notice of material changes on the site or by email.
Contact
[COMPANY LEGAL NAME], [COMPANY MAILING ADDRESS]. [PRIVACY EMAIL]