Privacy Policy

SeedsOfGanja ("we", "us", "our") operates the website seedsofganja.com and is the data controller responsible for your personal data under the General Data Protection Regulation (GDPR – EU 2016/679).

For any privacy-related enquiries you can reach us at:

When you create an account, we collect only the minimum data necessary:

• Email address — used to identify your account and for account-related communications.
• Username — a public display name you choose yourself.
• Password — stored exclusively as a bcrypt hash; we never store or have access to your plaintext password.
• Registration date and last login date — stored for security and audit purposes.
• IP address used when you sign up, log in or post a review, photo or grow report — stored for security for 6 months (see section 7).

Your data is used solely to:

• Create and manage your account on SeedsOfGanja.
• Allow you to log in and access member features.
• Maintain the security and integrity of the platform.

We do not use your data for advertising, profiling, automated decision-making, or any purpose other than those listed above.

Your data is stored in a private database accessible only to the site administrator. We apply the following security measures:

• Passwords are hashed using the bcrypt algorithm (PHP PASSWORD_DEFAULT) — industry-standard one-way encryption.
• Database credentials are stored in server-side configuration files, never exposed to the client.
• Access to the database is restricted by server firewall rules.

We retain your account data for as long as your account remains active. If you request deletion of your account, all personal data associated with it (email, username, hashed password) will be permanently removed from our database within 30 days of the request.

IP addresses linked to an account are deleted after 6 months; per-IP summaries of the server access logs after 14 days.

As a user based in the European Union, you have the following rights under the GDPR:

• Right of access — you may request a copy of the personal data we hold about you.
• Right to rectification — you may ask us to correct inaccurate data.
• Right to erasure ("right to be forgotten") — you may request permanent deletion of your account and all associated data.
• Right to restriction — you may ask us to temporarily stop processing your data.
• Right to portability — you may request your data in a structured, machine-readable format.
• Right to object — you may object to processing at any time.

To exercise any of these rights, contact us at mail@seedsofganja.com. We will respond within 30 days.

You also have the right to lodge a complaint with your national data protection authority (in Italy: Garante per la protezione dei dati personali).

We use a single session cookie (a standard PHP session) which is strictly necessary for keeping you logged in during your visit. This cookie contains no personal information, expires when you close your browser, and does not track you across other websites. No cookie consent banner is required for strictly necessary cookies under the ePrivacy Directive.

Shop link statistics. When you click a price or "Buy" button, the link passes through our server (/go/…) before opening the shop. We count the click without cookies and without storing your IP address: we keep only the product, the shop, the page and site language, the device type (mobile/desktop) and the country, derived from the IP address at that moment and then discarded. These statistics are anonymous and are used only to understand which shops and products are useful to visitors. Some shop links are affiliate links. IP geolocation by DB-IP.

Visit statistics. We count page visits with Umami, an open-source analytics tool that we host on our own server. It sets no cookies, does not store your IP address and does not follow you across other websites: we only see aggregated data such as the pages visited, the referring site, the country, the browser and the device type. The data stays on our server and is not shared with anyone.

Security logs. Like every web server, ours records each request (IP address, time, page, browser) in its access logs. We summarise them per IP address, keep the summaries for 14 days and use them only to protect the site from abusive bots and attacks: addresses that overload the server may be blocked. When you sign up, log in or post a review, photo or grow report, we also save the IP address used with your account for 6 months, to fight spam and abuse. Legal basis: our legitimate interest in keeping the site and network secure (Art. 6(1)(f) and Recital 49 GDPR). No cookies are involved and this data is never shared.

Security check. If our network provider Cloudflare asks your browser to pass a quick security check (for example on shop links), it may set a strictly necessary cookie (cf_clearance) that only remembers that the check was passed.

We do not sell, rent, share, or disclose your personal data to any third party for any purpose, including advertising or marketing. Your account data stays on our server and is never sent to external services.

Cloudflare. The site is served through Cloudflare, Inc., which acts as our processor: it handles each request (IP address, browser, requested page) only to deliver the site and protect it from attacks and abusive bots. Cloudflare may process this data outside the EU and is certified under the EU-US Data Privacy Framework. Legal basis: our legitimate interest in keeping the site available and secure (Art. 6(1)(f) GDPR).

SeedsOfGanja is intended for users aged 18 or older. We do not knowingly collect personal data from minors. If we become aware that a user is under 18, we will delete their account and associated data promptly.

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated effective date. We encourage you to review this page periodically. Continued use of the site after changes constitutes acceptance of the updated policy.

For any questions, requests, or concerns regarding this Privacy Policy or your personal data, please contact us: