Privacy Policy
Updated October 3, 2026
Who operates MOGanja
MOGanja is operated by Lucid Ventures LLC. Contact dmt@moganja.com about privacy, corrections, or deletion.
Optional shopper measurement
With your permission, we record catalog interests, dispensary profile and menu views, product detail opens, and clicks to a retailer website, menu, phone link, or directions. We use a random browser-session identifier that resets after 30 minutes of inactivity; the stored identifier is a keyed hash that changes each UTC day. This is pseudonymous data, not a count of unique people.
We store only supported event types, store identifiers, catalog categories, catalog brands or product identifiers, and whether a menu search returned results. We do not store your free-form search text in this pipeline. It is not linked to your email, review identity, or chat messages, and is not used to infer medical conditions.
Measurement is off until you allow it. Browser Do Not Track and Global Privacy Control signals take precedence. You can withdraw permission here or in the footer. Withdrawal stops new optional measurement and clears its browser session; previously recorded events expire through the retention schedule.
Google Analytics
When configured, Google Analytics loads only after measurement permission. We send public page paths without query strings and supported event properties. We do not send review content, email addresses, raw searches, or review-confirmation tokens. Admin, owner-dashboard, review-management, claim, and contact pages are excluded from our analytics instrumentation. Google may process permitted usage and device data under its own terms; advertising signals and ad personalization are disabled in our Analytics configuration.
What dispensaries receive
Claimed stores can see totals for their own measured traffic. Brand and category interest breakdowns require at least five measured browser sessions. Reports do not contain individual visitors, emails, session identifiers, or medical profiles. Retailer handoffs do not establish that an order or purchase occurred.
Reviews and confirmation emails
A review submission includes a private email, public nickname, rating, written experience, and visit date. We send a confirmation email and use human moderation before publication. Email confirmation establishes control of an email address, not a purchase. Publicly approved content and approved store responses are visible to everyone. Review emails are not added to marketing lists.
We store a keyed email hash to enforce one confirmed review per store per calendar month. Verification links are single-use, expire after 24 hours, and are stored as hashes. After confirmation, a private browser cookie permits management of the most recently confirmed review for 30 days. Moderators can see submitted content, reports, and decision history; a store can respond to published reviews but cannot change a shopper rating.
Other information and services
Contact, newsletter, listing-claim, and owner-support forms collect the information you submit for those purposes. Messages sent to Mo Knows may be stored with session and page context to operate and support the assistant. These records are outside the shopper traffic reports.
Vercel hosts requests and security logs, Neon stores platform data, Resend delivers requested emails, and Google Analytics processes permitted usage events. Maps and outbound retailer links involve the relevant providers. Featured-listing payments use Stripe. If display-ad services are enabled, their cookies and settings are described in our cookie policy. Those services have their own privacy terms.
Requests expose an IP address and user agent to hosting services. Our new review and measurement rate limits store keyed hashes, not raw IP addresses. Security processing is separate from optional analytics.
Retention
The new shopper event records expire after 90 days through a daily retention job. Expired rate-limit records are cleared daily. Unconfirmed review submissions are removed after their confirmation link has been expired for 24 hours. Private review email addresses are removed after 90 days, and expired review-management credentials are cleared. Review reports expire after 90 days.
Published reviews and moderation history remain until withdrawal, removal under the review policy, or a supported deletion request. Contact, newsletter, claim, chat, and earlier analytics records have separate retention needs; we do not claim this new 90-day job deletes those existing records. Ask dmt@moganja.com for access or deletion assistance. Provider log and Analytics retention also depend on their account settings.
Your choices
MOGanja is intended for adults 21 and older. You can browse without optional measurement, withdraw a review from its management page, or contact us to correct or delete information. We will verify that a request concerns your information before making changes. Updates to this policy will carry a new date.

