Last verified: May 2026
Our Approach to Privacy
CannabisAL.org is an educational site about cannabis policy in Alabama. We believe Alabama residents researching cannabis policy deserve robust privacy protections — arguably more, given Alabama’s federal-employer reality (Redstone Arsenal, NASA Marshall, Maxwell-Gunter, Fort Rucker, Anniston Army Depot, FBI Redstone, federal contractors) and the SF-86 continuous-evaluation environment that affects tens of thousands of Alabama-area workers.
What We Collect
Cookies (One)
We set a single cookie (cannabisal_age_verified) when you confirm you are 21 or older. This cookie lasts 30 days and prevents the age gate from appearing on every visit. That’s it.
We also set a cookie consent acknowledgment cookie (cannabisal_cookie_consent) when you dismiss the cookie notice. This lasts one year.
Server Logs
Like all websites, our web server automatically logs basic request information (IP address, page visited, browser type, timestamp). These logs are used solely for security monitoring and are not shared with third parties.
What We Don’t Do
- We do not use Google Analytics or any third-party analytics
- We do not use tracking pixels or retargeting
- We do not sell, share, or trade any visitor data
- We do not collect email addresses, names, or personal information
- We do not serve advertisements
- We do not use social media tracking widgets
Federal-Employee Privacy Note
A particular privacy consideration for Alabama visitors: many Alabamians work for federal employers (Redstone Arsenal, NASA Marshall, U.S. Space Command, FBI Redstone, Maxwell-Gunter Air Force Base, Fort Rucker, Anniston Army Depot, the VA Birmingham / Tuscaloosa / Central Alabama systems) or for federally-exposed private employers (Boeing Defense, Airbus Mobile, Austal USA, defense contractors with security clearances) where cannabis-related browsing history can theoretically surface in clearance-investigation contexts. We collect no personally-identifiable browsing data on this site, but visitors with security-clearance considerations should be aware of their broader internet-browsing privacy practices independently. Consider using a privacy-respecting browser configuration when researching cannabis policy.
Third-Party Services
We load the following resources from third-party CDNs for site functionality:
- Bootstrap CSS/JS from cdn.jsdelivr.net
- Bootstrap Icons from cdn.jsdelivr.net
- Google Fonts from fonts.googleapis.com
These services may log requests per their own privacy policies. We chose CDN-hosted assets for performance; no user data is sent to these services beyond standard HTTP requests.
Data Retention
We do not maintain any user database. Server logs are retained for a limited period for security purposes and then deleted. The age-verification cookie expires after 30 days. The cookie consent cookie expires after one year.
Children’s Privacy
CannabisAL.org is intended exclusively for adults aged 21 and older. We do not knowingly collect any information from minors. The age-verification gate is designed to prevent access by those under 21.
Alabama Privacy Law
Alabama has not enacted comprehensive consumer-privacy legislation comparable to California’s CCPA or Virginia’s VCDPA. Alabama’s data-breach notification statute governs notice obligations in the event of unauthorized access to personal information. Because we do not collect, store, or process personal information beyond basic server logs, this law does not impose specific affirmative obligations on us.
Changes to This Policy
If we ever change our privacy practices, we will update this page with a new "last verified" date. We have no plans to add tracking or analytics.