Privacy policy.

1. Who we are and what this covers

MyCigarHunt is a cigar discovery and comparison service. We help adults find cigars and the retailers that carry them. We do not sell cigars, take payment for cigar purchases, or fulfill retailer orders.

This policy describes information handled through our website and related account, support and retailer-discovery features. “We,” “us” and “our” refer to the operator of MyCigarHunt. The operator’s legal identity and business contact details remain to be finalized for this draft.

Retailers, identity providers and other sites you choose to visit have their own privacy practices. This policy does not describe their independent services. Features described as coming soon are not active simply because they are mentioned here.

2. Privacy at a glance

• You can browse the catalog without creating an account.
• My Humidor, its private notes, saved preferences and review drafts currently stay in your browser. Signing in does not upload them.
• We do not sell personal information or share it for cross-context behavioral advertising. The current application does not include advertising pixels, session replay or third-party audience analytics.
• Limited retailer-click measurement is separate from account data. It does not determine organic retailer ordering.
• Hosting and authentication services still process technical information needed to deliver and secure the site. “Browser-local” does not mean that visiting a website involves no network processing.

3. Information stored on your device

The current Humidor stores your saved cigar selections, Want to try and Liked it choices, package-specific watches and target prices, private notes, ratings and review drafts in this browser. Saved brand and retailer preferences, strength/size/budget preferences, comparison selections, units and age confirmation also use browser storage. Older saved data may retain fields from earlier versions until you remove or replace that data.

We do not automatically receive the contents of this local store. It is not a cloud backup or an account-protected vault. Anyone who can use the same browser profile may be able to read it, including after you sign out. Browser extensions or device-backup services you use may have their own access.

You can remove individual Humidor entries or use your browser’s site-data settings to erase local data. Export my data creates a file on your device; importing a compatible backup reads it locally. Neither action automatically sends the file to us. Protect exported files and delete unwanted copies yourself. Clearing the site’s storage, using a different browser or changing preview addresses can make saved information unavailable; we cannot recover local data we never received.

Public review posting and cloud Humidor synchronization are not active. A private draft is not permission to publish it later. Any future upload or public post will require a separate, explicit action and an updated explanation of visibility and deletion.

4. Accounts and sign-in

Where account sign-in is enabled, our authentication and database providers support these services. Email/password registration processes your email address, authentication credentials, account identifier, verification/recovery events and session information. Your password is used for authentication; do not send it to our support contact.

If an enabled Google, Apple, Facebook or Microsoft option is selected, that provider supplies an account identifier, email or relay address and any basic profile information returned by the approved sign-in flow, which may include a name or profile image. We use that information to authenticate you and manage the connection. The sign-in feature does not request your contacts, social posts or permission to post on your behalf. Review the provider’s permission screen and privacy policy. We do not receive your password for that provider.

Session cookies keep sign-in working. Provider linking is a deliberate account action, not an instruction to publish or import local Humidor data. Available options depend on which providers have been configured.

The older Collection notes feature is separate from My Humidor. When used while signed in, notes you save there, their ratings and associated cigar identifiers are stored with your account by our database provider; when signed out, its notes are local. Account-backed notes are not public and access is restricted to their owner through application/database permissions. Authorized operators and service providers may have administrative access for legitimate service and security needs. Signing in does not silently import earlier local notes.

5. Browsing, search and technical information

Loading a page or image sends a request to the infrastructure serving it. Our hosting provider and configured storage/authentication providers can process IP addresses, request times and URLs, browser/device information, response status and security or diagnostic information to deliver the service and protect it from abuse.

Search terms, filters and comparison selections can appear in page URLs and therefore reach our servers or hosting infrastructure, remain in browser history, or be included when you share a link. Avoid putting personal or confidential information in catalog searches. A saved comparison selection can stay local while the comparison URL still identifies the cigars you chose.

Our application error logging is designed to record operational events and error classifications while excluding credentials, account identifiers, raw query strings, cookies and request headers. Provider-level access/security logs are separate; this policy does not claim they contain no IP addresses or other technical identifiers.

We do not currently request precise device location, a camera, microphone, government identification or payment-card details through the consumer service. Local retailer discovery is not an active location-tracking feature.

6. Retailer links and click counts

When you follow an observed retailer offer, the browser may send a first-party event identifying the cigar, retailer, offer and page placement. When recording is configured, the event is stored with a timestamp. The event record does not include an IP address, user agent, email, account ID, cookie ID, session ID, referrer or browser fingerprint. Ordinary network processing described above still occurs.

We use these limited counts to assess useful listings and aggregate referral activity. We do not join them to account profiles. Click counts and affiliate or commercial relationships do not control organic retailer ordering.

A retailer you visit receives its own direct request from your browser and handles any purchase, account or tracking under its policies. We do not send it your Humidor, private notes or account profile as part of the outbound-link feature. Any affiliate or sponsored link must be labeled as described in our disclosure.

7. Messages and business contacts

If you contact us through an operational contact channel, we receive the address you use, your message and any attachments or details you choose to provide. We use these to answer questions, handle accessibility/privacy requests, investigate corrections and maintain a record of the matter. Please share only what is needed; do not send passwords, authentication codes, identity documents or a complete Humidor backup with an initial request.

If you correspond on behalf of a shop, lounge, retailer or manufacturer, we may handle your business contact details and information about the business or catalog that you provide. This does not automatically create a public personal profile or authorize marketing. Public business information and catalog provenance are distinct from private correspondence.

For privacy questions and requests, email hello@mycigarhunt.com.

8. How information is used

We use the relevant information to deliver pages and requested features; authenticate accounts; save account-backed notes when requested; provide verification and recovery; respond to inquiries; diagnose failures and prevent misuse; assess aggregate retailer referrals; and meet applicable legal duties or resolve disputes. Browser-local preferences help you organize and filter the catalog on your device.

We do not use private notes or review drafts to train an AI model, build advertising audiences or determine organic retailer placement. The consumer application does not send them to a generative-AI service. We do not make decisions with legal or similarly significant effects about you through automated profiling.

Creating an account or saving a cigar does not enroll you in a marketing newsletter. Account verification, recovery and essential service communications are different from marketing.

9. Providers and other disclosures

• Service providers: Hosting, authentication, database and storage providers support the application and its configured features. An email provider will process delivery information and messages when email service is activated. We have not finalized that provider in this draft.
• Your chosen services: social sign-in providers and retailers receive information when you use their services, as explained above.
• Legal and safety needs: information may be disclosed where required by valid legal process or reasonably necessary to investigate misuse, protect people and the service, or establish or defend legal rights, subject to applicable law.
• Business changes: a proposed transfer of the service may require limited disclosure under appropriate safeguards; any completed transfer must remain subject to applicable privacy obligations and notice requirements.

We do not make private account content available to manufacturers or retailers merely because they participate in MyCigarHunt. We remain responsible for how personal information is handled on our behalf. You may use the privacy contact channel to request information about the providers relevant to your data.

10. Cookies and browser controls

On your first visit, we use your browser language preference to choose English or Spanish, with English as the fallback. Your manual language choice is stored in a first-party cookie for up to one year and takes priority on later visits. You can change it at any time using the language selector. Age confirmation is remembered for the current tab session, including subpages and refreshes. A fresh tab session asks again; browsers may restore a previous session when reopening tabs. Other local preferences use local storage, which normally has no automatic expiry. Authentication uses cookies for sessions and sign-in verification where enabled. Infrastructure may also use security or deployment-access cookies. These are distinct from advertising trackers, which are not installed in the current application.

You can clear or block cookies and site storage in your browser. Doing so can sign you out, erase local saved data, prevent preferences from being saved or cause the age question to reappear. Signing out alone does not clear your Humidor or exported files. Disconnecting a social provider in its settings does not itself delete your MyCigarHunt account.

We do not currently sell/share information for cross-context advertising or use it for targeted advertising, so no such processing is switched on by a missing opt-out signal. The application does not currently change behavior in response to Do Not Track or Global Privacy Control signals. If covered processing is introduced, the relevant notice and legally required preference controls must be implemented first; this statement is not a claim that a signal-handling feature already exists.

11. How long information is kept

Retention depends on the information and its purpose. It is not a single retention rule for everything on the site.

Browser-local data and backups

Local data remains until you remove it, the browser clears it or the device/profile is lost. Downloaded backups remain wherever you keep them. We cannot erase those copies remotely.

Accounts and account-backed notes

Accounts are retained while maintained for the service. You can delete individual saved Collection notes. Account closure requires a separate request; the current UI does not provide a complete cloud-account export/delete service. Any necessary legal/security retention and backup expiry must be explained when the request is handled.

Support, security and provider records

Relevant considerations include the time needed to resolve the request or incident, maintain service integrity, meet legal obligations and establish or defend claims. Provider-log and backup periods still require operational confirmation before this draft becomes effective; no fixed deletion period is represented as implemented.

Raw retailer-click events

The retention period and scheduled deletion process are not yet finalized. The earlier 25-month proposal is not an active deletion guarantee. This is an approval and implementation item before launch, separate from market history.

Catalog and market history

Historical cigar facts, source provenance, retailer offers, package configurations, prices and availability are preserved without an arbitrary time cap. They describe the catalog and market, not a consumer’s account history. This rule does not authorize indefinite retention of unrelated personal information or override applicable privacy rights.

12. Your choices and privacy requests

You may browse without registering, choose whether to sign in, remove local entries, export a local backup, change browser storage settings and delete individual account-backed notes where that feature is used. Local export does not include authentication records or every category of data held by providers.

For information held by us, use the privacy contact channel to request access, correction, deletion or a copy, or to raise a concern. Describe the request and the account email if relevant. We may need proportionate verification before disclosing or changing account information, and proof of authority if someone acts for you. Do not include your password. We cannot identify an unlinked retailer-click event as yours merely from an account email.

Where applicable, we will explain any limitation or refusal and available review or appeal route. Requests are subject to the rights, exceptions and response periods that apply to the service and your circumstances. We do not penalize you for exercising an applicable privacy right. Deleting an account does not automatically remove files or site data on your devices; you control those separately.

For access, correction, deletion, copies of your information or an appeal, email hello@mycigarhunt.com.

13. Location-specific rights

Privacy rights depend on where you live and whether a law applies to this service. U.S. state laws may provide rights to know/access information, correct it, delete it, obtain a portable copy, appeal a decision, use an authorized agent, or opt out of sale, sharing, targeted advertising or certain profiling. Additional limits may apply to sensitive information. This draft does not assert that MyCigarHunt meets the coverage thresholds of every state law.

If EEA or UK data-protection law applies, rights may also include restricting processing, objecting to processing based on legitimate interests, withdrawing consent for processing that relies on consent, and complaining to the relevant supervisory authority. Withdrawal does not invalidate earlier lawful processing. For covered operations, the proposed bases are providing requested account services, legitimate interests in service security/support, compliance with legal duties, and consent where required. The relevant assessment, operator identity and international-transfer arrangements must be confirmed before this draft is used for those markets.

14. Security and international processing

We use technical controls intended to protect information, including encrypted connections, account-access restrictions, database ownership policies, limited application logging and controls on sensitive operations. No website, device or transmission can be guaranteed completely secure. Keep your device, browser profile, sign-in details and backup files secure.

Hosting, authentication and support providers may process information in the United States or other countries. Storage and processing locations, provider agreements and any legally required transfer safeguards must be verified for the launch configuration. We do not claim that all information remains in a particular country or that an unverified certification or contract covers every transfer.

15. Adults-only service

MyCigarHunt is intended for people aged 21 and over. The age prompt records a confirmation in the browser; it does not collect a date of birth, identity document or verified proof of age. We do not knowingly solicit accounts or personal information from children. If you believe a child has supplied personal information to us, use the privacy contact channel so the matter can be investigated and addressed under applicable law. Do not send a child’s identification document with the initial report.

16. Changes to this policy

We will identify the effective date of the approved policy and update its revision date when practices change. Material changes will be explained through an appropriate notice, with any additional consent required by law obtained before the new processing starts. Merely visiting the site is not blanket consent to unrelated future data uses.

This draft is not yet effective. The accessibility statement explains how to report difficulty accessing this information.