Privacy Policy
Short version: 420Grades is a directory and educational publisher. We collect the email you send us, basic analytics about page visits, and the technical data needed to run the site. We do not sell products, process payments, sell personal information, or share it for behavioural advertising. When you click an affiliate link, the retailer or affiliate network may set its own cookies after you leave this site.
Last updated: November 5, 2026. This policy describes what 420grades.com actually does today. It is not legal advice. If you need a data-processing agreement for a business relationship, email us first.
Who we are
420Grades operates https://420grades.com, an independent directory of hemp and CBD brands with educational guides to cannabinoids, lab reports and buying. You can reach us at 420Grades@gmail.com. That email address is the only contact channel; there is no phone line, live chat or physical storefront.
420Grades is a publisher and directory, not a retailer. Product listings link to third-party brands and affiliate networks. We do not hold stock, fulfil orders, process payments or handle returns.
What we collect
Information you give us
- Email and correspondence. If you email us, we receive your email address, your name if you include it, and whatever you write, including any attachments.
- Corrections and listing requests. If you ask us to correct a page or list a brand, we keep the details you send so we can act on the request and keep a record of the change.
- Newsletter. If a newsletter signup is offered and you use it, we collect the email address you submit and the date you subscribed. The current site has no working newsletter form; this section applies if one is added.
- Account and wishlist. A WooCommerce account and wishlist are available on the site. If you create an account, WordPress and WooCommerce store your username, email address and account preferences. You do not need an account to read the site.
Information collected automatically
- Analytics. We use Google Analytics 4 (measurement ID
G-PXHFCX1SYZ) through Google Site Kit. Google Analytics records pages viewed, referring page, approximate location derived from IP address, browser and device type, and interactions such as outbound clicks. It sets cookies such as_gaand_ga_*. - Server logs. Our hosting provider and content delivery network record standard request data, including IP address, timestamp, requested URL, user agent and response status, for security and troubleshooting.
- Cookies needed to run the site. WordPress and WooCommerce set session cookies for login, cart state and security. These are required for those features to work.
Information created when you click an affiliate link
Buy buttons and some brand links point to third-party retailers or affiliate networks. When you click one, you leave 420grades.com. The retailer or network may set a cookie, read a tracking parameter, and receive your IP address and the page you came from. That processing is controlled by the retailer or network, not by 420Grades. We do not receive your payment card details, shipping address or order contents.
Cookies and similar technologies
| Category | What it does | Set by | How to control it |
|---|---|---|---|
| Essential | Login, cart, wishlist and security. The site does not work properly without them. | 420grades.com, WordPress, WooCommerce | Blocking them may break login, cart and wishlist features. |
| Analytics | Counts page views and outbound clicks in aggregate so we can see which guides are useful. | Google Analytics 4 | Block third-party cookies in your browser, use a private window, or install Google’s opt-out browser add-on. |
| Affiliate | Attributes a purchase to the link you clicked so the retailer can pay a commission. | The retailer or affiliate network, after you leave this site | Controlled by that third party. Check its cookie notice and privacy policy. |
We do not use advertising cookies, remarketing audiences or cross-site behavioural advertising on 420grades.com. We do not sell personal information or share it for cross-context behavioural advertising.
Most browsers let you block or delete cookies in their settings. Blocking analytics cookies does not stop you reading the site. Because we do not sell or share personal information, there is no separate “Do Not Sell or Share” opt-out to exercise; if you believe we have done so, contact us and we will investigate.
How we use information
- To operate, secure and troubleshoot the site.
- To answer your emails, corrections and listing requests.
- To understand, in aggregate, which pages and guides are used, so we can improve them.
- To keep records of corrections and brand verification.
- To comply with legal obligations and respond to lawful requests.
We do not use your information to make automated decisions that have legal or similarly significant effects on you, and we do not build advertising profiles.
Legal bases for processing (EEA, UK and Switzerland)
Where European data-protection law applies, we rely on:
- Legitimate interests in operating a secure website, understanding aggregate page use, and responding to enquiries.
- Consent where we ask for it, for example if you opt in to a newsletter.
- Legal obligation where we must keep or disclose information.
You can object to processing based on legitimate interests at any time by emailing us. You can also block analytics cookies in your browser. If you ask us to stop processing your correspondence, we will delete it unless we are required to keep it.
Who we share information with
- Hosting and infrastructure providers that serve the site and keep security logs.
- Google, for Google Analytics and for the Gmail mailbox used to answer your emails.
- Affiliate networks and retailers, but only after you click an outbound link and on their own terms.
- Professional advisers and authorities where necessary to comply with the law, enforce our terms, or protect rights and safety.
We do not sell personal information. We do not share it with data brokers or advertising networks.
International transfers
Our providers may process information in the United States and other countries. Where required, transfers rely on the provider’s contractual safeguards, such as standard contractual clauses. The practical effect is that your information may be handled under the laws of the country where the provider operates.
How long we keep information
We keep information only as long as we need it for the purpose it was collected for:
- Emails and corrections: for as long as needed to resolve the request and keep an accurate record, then deleted or anonymised.
- Analytics: for the retention period configured in the Google Analytics property. Aggregate reports may be kept longer because they do not identify you.
- Server logs: for the short period our hosting provider retains them for security and troubleshooting.
- Account data: until you delete the account or ask us to delete it, plus any period required for security or legal records.
Security
The site uses HTTPS. Access to the WordPress administration area is restricted, and we use application passwords rather than sharing account passwords with integrations. We keep the amount of personal information we hold to a minimum. No website can guarantee absolute security; if you believe your information has been compromised, email us.
Your rights
If you are in the EEA, UK or Switzerland
You have the right to access, correct, delete or restrict processing of your personal information, to object to processing, to data portability, and to withdraw consent where processing is based on consent. You also have the right to complain to your local data-protection authority. Email us first so we can try to resolve the issue.
If you are in California or another US state with a privacy law
You may have the right to know what personal information we hold, to request a copy, to correct it, to delete it, and to be free from discrimination for exercising those rights. We do not sell personal information or share it for cross-context behavioural advertising, so there is no sale or sharing to opt out of. To make a request, email us from the address connected to your request and tell us what you want. We may need to verify your identity before acting.
Children and age
420grades.com is intended for adults of legal age to buy hemp or cannabinoid products where they live, and in any event not for anyone under 21. We do not knowingly collect personal information from children. If you believe a child has sent us information, email us and we will delete it.
Third-party links
This policy covers 420grades.com only. Brand websites, retailers, affiliate networks and other sites we link to have their own privacy policies. Read them before you buy or submit information.
Changes to this policy
We update this page when the site or the law changes. The “Last updated” date at the top shows the current version. Material changes will be reflected on this page; because we do not maintain a mailing list, we cannot email every reader individually.
Contact
Questions, requests or complaints: 420Grades@gmail.com. Put “Privacy” in the subject line and tell us what you need. See also our Terms of Use, Affiliate Disclosure and Editorial Policy.
This page is informational and is not legal advice.
