Privacy Policy & Analytics

Who operates the site

Nicholas French operates Texas Cannabis Ledger at texascannabisledger.org. Privacy questions and requests go to nick@stackswap.ai. This policy covers TCL’s site and direct correspondence. Government sources, listed professionals and external checkout or contribution providers have their own practices.

Information you send

Directory correction, claim, removal and suggestion forms prepare a draft in your own email application. Filling in the form does not submit its contents to a TCL server. Nothing is sent until you send the email. We receive your email address, message, supplied public links and any attachments you choose to send, and use them to review and respond to the request. Correspondence is handled in Google Workspace/Gmail.

Do not include case facts, client or patient information, identity documents, payment details or other confidential material. A professional email address and public source links are ordinarily sufficient to explain a listing request. Claiming a listing does not create an account or automatic editing access.

Technical information and hosting

Fly.io hosts TCL. Requests necessarily expose technical information such as an IP address to hosting and network services. Server access or error logs can include request paths, query strings, timestamps, response codes, browser information and referrers. These records support delivery, security and troubleshooting. Do not put sensitive information in search fields, URLs or query parameters.

TCL’s deployed application has no visitor-account database or legal-client intake system. It does not offer private case messaging or forward visitors’ case details to lawyers. That does not mean hosting services keep no logs.

Google Analytics

TCL currently loads Google Analytics (measurement ID G-TRSJ28ZC86) automatically when a page runs JavaScript. There is currently no TCL analytics opt-in control. Google can receive page URLs and query parameters, referrers, online identifiers, device and browser information, network information including IP addresses, and page or interaction events. Analytics may set or read first-party cookies. This is not a promise that visits are anonymous.

The site also sends support-link impressions and clicks, including destination links and placement labels, and shop interaction events such as product views and bag actions. These help us understand discovery and use of TCL and its shop. We do not intentionally send correspondence, confidential case facts or payment-card details to Analytics. Avoid entering sensitive information in public search controls or URLs.

You can block analytics using browser privacy controls, content blockers or Google’s Analytics opt-out browser add-on. Clearing cookies may remove existing browser identifiers but does not delete past provider records. TCL does not currently implement a site-level Do Not Track or Global Privacy Control response. Read how Google receives information from partner sites and Google’s Privacy Policy.

Browser storage and public searches

The shop stores a cart identifier in localStorage under tcl_storefront_cart_v1 so it can restore your bag. It remains until cleared or replaced; the checkout provider controls cart validity. The site stores allowlisted campaign tags in sessionStorage under tcl_campaign to carry attribution through browsing and checkout; sessionStorage normally lasts for the tab’s session. Browser settings can block or clear this storage, which may affect bag restoration or attribution.

County comparisons, directory filters and selected records can appear in shareable URLs. They are public browsing state, not private communications. Third-party merchandise images are fetched from Fourthwall’s image hosts, which receive network request information. Site fonts are self-hosted.

Orders, contributions and independent providers

The TCL shop uses Fourthwall’s storefront and cart services. Fourthwall handles checkout, payment, shipping and order information under the shop’s checkout privacy policy and Fourthwall’s policy. TCL’s application does not collect full payment-card details. Provider account tools may make order or support information available to the operator; this policy does not claim that all order information is invisible to TCL.

Voluntary contributions link to Buy Me a Coffee. Visiting, contributing or contacting a listed professional takes you to an independent service. Review its privacy terms before submitting personal information. TCL does not control those services’ retention or subsequent use.

Public professional and business records

Directory and hemp records may include public professional names, business addresses, professional phone numbers, published practice claims and source dates. We use those records to provide source-attributed public information. They are not confidential legal-client submissions. Listing correction, claim and removal requests receive review; public availability alone does not guarantee correctness. TCL’s arrest publications use aggregate records rather than names, home addresses or case-level arrest histories.

Advertising inquiries

The directory advertising inquiry form collects your contact name, business name, email, optional phone, website and message, category, selected counties and the originating directory. The TCL server validates the submission and saves it to a private Google Sheet through Google Apps Script. Success is shown only after Google confirms storage. An opaque inquiry identifier prevents duplicate retries.

The Sheet is restricted to authorized TCL operators; inquiries are not published, sent to listed professionals or put in analytics URLs. There are no automated email notifications, advertiser accounts or billing. TCL may use the supplied contact details to respond personally. Do not submit client, case or patient information.

Directory placement impressions, clicks and accepted-inquiry counts are recorded separately as aggregate first-party events in hosting logs, without contact details, form content or persistent visitor identifiers. Placement-event collection respects the browser’s Do Not Track and Global Privacy Control signals; the site’s separate Google Analytics behavior is described above.

Sharing and purposes

Hosting, Google Analytics, Google Workspace and Fourthwall process information in their respective roles described above. Direct emails may be handled through the sender’s chosen mail provider as well. We do not publish private correspondence as directory content or sell visitor case details as referrals. Public source records and their professional contact details are intentionally published.

We may disclose information when legally required or reasonably necessary to respond to a security incident or protect lawful rights. There is no paid advertiser audience-sharing integration in the deployed application. We have not established whether every third-party analytics activity falls outside all jurisdiction-specific definitions of sale, sharing or targeted advertising; this policy makes no blanket exemption claim.

Retention, deletion and security

There is no fixed TCL-wide retention schedule currently implemented for correspondence or infrastructure logs. We retain correspondence as needed to review requests, maintain an explanation of publication decisions and meet applicable obligations; you may ask us to delete unnecessary correspondence. Provider logs, analytics and backups have their own settings and limitations. We cannot promise immediate deletion from every provider or backup.

The site uses HTTPS through Fly.io, basic browser security headers and source-controlled publication workflows. Those measures do not guarantee security, confidentiality or uninterrupted service. Do not send sensitive information through ordinary email. We do not claim end-to-end encryption, a certified security program or a retention period that has not been configured.

Privacy requests and children

To ask about access, correction, deletion or applicable privacy choices, email nick@stackswap.ai with the minimum information needed to identify the request. We review requests manually, may ask for proportionate identity or authority confirmation, and respond as required by applicable law. Rights, exceptions and any appeal rights depend on the law that applies. TCL has no automated privacy-request portal.

The site is intended for a general audience, not directed to children under 13. We do not knowingly solicit children’s personal information. If you believe a child has sent personal information, contact us so we can investigate and take appropriate action.

Changes to this policy

We update this page when information practices materially change, showing the effective date and summary below. Additional notice will be provided where required. Planned services are not treated as already configured.

Change summary

October 21, 2026 — Initial TCL privacy policy: automatic Analytics, browser storage, hosting and mail practices, public directories, external checkout, manual requests and private Google Sheet advertising inquiry storage without automated email notifications.