Privacy & review policy
HempLookup privacy and reviews
HempLookup privacy information covers the review and contribution forms used on this site, including private email addresses, moderation records and photographs submitted for publication. The sections below explain the purpose of these records, the distinction between private submissions and approved public contributions, and how to request a correction or removal.
You can browse HempLookup without creating an account. This policy describes the information used when you submit a strain review.
Privacy: what a review includes
The review form asks for a display name, email address, rating, and written review. Approved display names, ratings, review text, and publication dates are public. Email addresses are used for moderation and are not displayed with reviews.
Moderation and abuse prevention
Every review is held for moderation. Submissions may be rejected for spam, promotional links, personal information, abuse, or content unrelated to the strain. The review system stores no raw IP address or browser-agent field with the review. Salted IP and email hashes are used for temporary rate limits and expire within 24 hours. Form security tokens expire in about 32 minutes.
No analytics or tracking cookies are added by this theme or its review module. If the site administrator enables Cloudflare Turnstile, its challenge is loaded on the review form and Cloudflare processes the information needed for the bot check.
Privacy in storage and site administration
Submitted reviews and their moderation records remain in the site database until the site administrator deletes them. Hosting infrastructure may separately keep security and access logs. Administrators use WordPress authentication cookies when signing in; public browsing does not require a WordPress account.
Your information
Use a display name you are comfortable publishing and avoid including identifying or sensitive personal information in a review. The site administrator can use WordPress’s personal-data export and erasure tools to respond to requests relating to a review email address.
Source corrections and photo proposals
The contribution form collects a display name, email address, strain name, source link, proposal text and an acknowledgement that the information may be reviewed for publication. These submissions are stored privately in the WordPress editorial queue. Their email addresses and original submission text are not automatically published.
Only accepted source information or photographs with verified reuse terms are added to public profiles. We may publish the agreed photographer credit beside an accepted image. Form security uses expiring signed tokens, a hidden spam field, submission timing and temporary rate limits. Raw visitor IP addresses and browser-agent strings are not stored in contribution records.
Photographs attached to reviews
If you attach photographs to a strain review, we record your publication permission and store processed copies privately for moderation. Files are decoded and re-encoded to remove embedded metadata, including GPS location. A moderator must approve the review and its photographs before publication. Your chosen display name becomes the public photographer credit; your email address remains private.
Pending unpublished photographs expire after 30 days through scheduled cleanup. Approved photographs remain in the public media library while the contribution is published. If approval is withdrawn, the photos return to private storage for moderation. Deleting a review removes its owned photographs. See photo contributions for the publication permission and correction or removal process.
Privacy, analytics and external services
Google Site Kit is installed on this site and can load Google Analytics separately from the HempLookup review module. Analytics may process page visits, device or browser information and identifiers under the site administrator’s configuration. Google explains this processing in how Google uses information from sites that use its services. Browser controls and the Google Analytics opt-out add-on provide additional choices.
Links to source websites, photographer pages and licenses lead to services with their own privacy practices. Following those links leaves HempLookup. Published photographs are hosted on this site; opening a profile does not require loading a photographer’s original image from another website.
Make a privacy request
Use the private contribution form for a privacy question, review correction or photograph removal request. Include the page address, your review display name and enough detail to identify the record. Use the email associated with the contribution when possible. Do not send identity documents, passwords or other unnecessary sensitive information.
Public copies can remain in third-party caches after a contribution is removed from the live site. The site administrator can address records under HempLookup’s control; external search engines and other websites manage their own copies. This privacy policy describes the current contribution workflow and is updated when that workflow changes.
