Overview
TerpTracer ("we", "us") is a personal cannabis concentrate telemetry tool built by Lunar Aerospace. This policy describes what data we collect, why we collect it, and the choices you have. We aim to keep this short and honest.
Data we collect
- Account: email address and a Supabase-issued user id, plus your membership tier.
- Acquisition: campaign tags in the link you followed and the referring page, when available.
- Stash records: brand, strain, purchase price, weight, and the source COA you scanned or entered.
- Sessions: temperature, duration, consumption amount, vibe and flavor tags, and notes you choose to attach.
- Scans: the COA URL or label image you upload, and the terpene profile we extract from it.
- Device pairings: if you pair a Puffco Peak Pro or similar device, we store the device id and your last-used settings.
How we use it
- To render your dashboard, stash list, and session history.
- To generate personalized terpene insights from your logged sessions. Your data is not used to train third-party models.
- To enforce free-tier limits and bill Premium subscriptions via Gumroad. We never see your card number.
Who we share with
Infrastructure providers only: Supabase for authentication and database, AWS for hosting, Gumroad for payments, and Google Gemini / Anthropic Claude for the AI insight engine. We also use Google Analytics for product analytics, Sentry for error monitoring, and self-hosted Listmonk with Amazon SES for marketing email you explicitly opt into. We do not sell your data or share your records with cannabis brands, dispensaries, or law-enforcement absent a lawful order.
Your choices
- Export: download all your data as JSON from Settings → Export Data.
- Delete: delete your TerpTracer application records and user-scoped uploads from Settings → Delete Account, or follow the steps at Delete Your Account if you cannot sign in. Supabase separately manages the authentication identity and security logs; contact us if you also want that provider record removed.
- Marketing email: choose an explicit opt-in or opt-out during signup. Opted-in messages include an unsubscribe link.
Retention
We retain application records while your account is active and delete them when you use Delete Account. Infrastructure backups and security logs may persist for up to 30 days. Newsletter subscription and suppression records are managed separately so we can honor unsubscribe requests.