Privacy policy

Last updated November 10, 2026

Sixstar is a diary and review community for adults 21 and over. What you log about cannabis is sensitive, so we collect as little as we can and never sell it.

What we collect

• Account details: your email address and username.
• Your date of birth, used only to confirm you are 21 or older. It is stored separately from your profile and never shown to anyone.
• Your state or country, used to switch features on or off under local law. If you use "Use my location", we read your position once to find where you are and do not store the coordinates.
• What you post: logs, ratings, reviews, photos, lists, follows, likes and reports.
• Basic technical data such as app version and crash reports, so we can fix problems.

How we use it

• To run your diary, show your reviews to the community, and recommend batches that match your taste.
• Recommendations are built from your own ratings and lab data. Paid placements never change them.
• To keep the community safe, including reviewing reports and enforcing the community guidelines.

What we never do

• We never sell your personal data.
• We never send identifiable data, such as your name, email, date of birth or location, to outside AI services.
• We never share your individual logs with brands or stores, except what you post publicly.

Aggregate insights

• If you opt in, your activity can be included in anonymous market statistics, such as which terpenes are popular in a state. Every figure we share combines at least 50 people, and you can opt out at any time in Settings.

Your choices

• You can edit or delete any log, list or photo.
• You can delete your account and data from Settings at any time. We remove it from the live service right away and from backups within 30 days.
• You can download a copy of your data from Settings, or ask for one by writing to support@sixstarca.com.

Who we share with

• Service providers that host and run Sixstar for us, such as our database and hosting providers, under contracts that limit how they use your data.
• Law enforcement only when the law requires it, and we will tell you unless we are legally barred from doing so.

Your rights by location

• In US states with privacy laws, such as California, you can ask to see, correct or delete your data. We don't sell or share personal data for advertising, so there is nothing to opt out of.
• In the EU, including Germany, the Netherlands and Spain, you have rights under the GDPR to access, correct, delete, restrict or move your data, and to object to how we use it. We use your data to provide the service you asked for (contract), to keep the community safe (legitimate interest), and with your consent for optional insights. You can complain to your local data protection authority.
• In Thailand, you have similar rights under the PDPA.
• Your data is stored in the United States. For people outside the US, we rely on standard contractual safeguards for that transfer.
• To use any of these rights, write to support@sixstarca.com. We answer within 30 days.

Security and retention

• Data is encrypted in transit and at rest, and access is limited to what each person needs.
• We keep your data while your account is open. Deleted accounts are removed from the live service right away and from backups within 30 days. Reports may be kept longer when needed to keep the community safe.
• Sixstar is not for anyone under 21. If we learn an account belongs to someone under 21, we delete it.