Last verified: April 2026
Our Approach to Privacy
TwinCitiesCannabis.org is an educational site about cannabis in Minneapolis and St. Paul. We believe cannabis-curious visitors deserve the same privacy protections as any other website visitor — arguably more, given the federal-employer footprint at the Federal Reserve Bank of Minneapolis, federal courts, the Minnesota National Guard, federal-contractor positions across the metro, and the cross-border traffic from Wisconsin / Iowa visitors who face state-criminal exposure for any cannabis presence in their home state.
What We Collect
Cookies (One)
We set a single cookie (twincitiescannabis_age_verified) when you confirm you are 21 or older. This cookie lasts 30 days and prevents the age gate from appearing on every visit. That’s it.
We also set a cookie consent acknowledgment cookie (twincitiescannabis_cookie_consent) when you dismiss the cookie notice. This lasts one year.
Server Logs
Like all websites, our web server automatically logs basic request information (IP address, page visited, browser type, timestamp). These logs are used solely for security monitoring and are not shared with third parties.
What We Don’t Do
- We do not use Google Analytics or any third-party analytics
- We do not use tracking pixels or retargeting
- We do not sell, share, or trade any visitor data
- We do not collect email addresses, names, or personal information
- We do not serve advertisements
- We do not use social media tracking widgets
Third-Party Services
We load the following resources from third-party CDNs for site functionality:
- Bootstrap CSS/JS from cdn.jsdelivr.net
- Bootstrap Icons from cdn.jsdelivr.net
- Google Fonts from fonts.googleapis.com
These services may log requests per their own privacy policies. We chose CDN-hosted assets for performance; no user data is sent to these services beyond standard HTTP requests.
Data Retention
We do not maintain any user database. Server logs are retained for a limited period for security purposes and then deleted. The age-verification cookie expires after 30 days. The cookie consent cookie expires after one year.
Children’s Privacy
TwinCitiesCannabis.org is intended exclusively for adults aged 21 and older. We do not knowingly collect any information from minors. The age-verification gate is designed to prevent access by those under 21.
Federal-Workplace Considerations
A particular privacy consideration for Twin Cities visitors and residents: substantial federal-employer presence in the metro (Federal Reserve Bank of Minneapolis at 90 Hennepin, federal courts in both downtowns, Minnesota Army & Air National Guard, MSP airport TSA operations, federal contractors across UnitedHealth/3M/Target/etc., and the U of Minnesota with its DEA license and federal research grants) means cannabis-related browsing history can theoretically surface in clearance-investigation contexts. We collect no personally-identifiable browsing data on this site, but visitors with security-clearance considerations should be aware of their broader internet-browsing privacy practices independently.
Cross-Border Visitor Considerations
Wisconsin, Iowa, North Dakota, and South Dakota visitors face additional privacy considerations: cannabis-related browsing history could theoretically be subpoenaed in destination-state criminal investigations or workplace inquiries. Browsing this site on a personal device on a non-work network is the safer practice.
Student Considerations
U of Minnesota, Macalester, St. Thomas, Hamline, Augsburg, St. Catherine, and other Twin Cities university students should be aware that their university Wi-Fi and managed-device traffic may be logged by the university for security and DFSCA-compliance purposes. Browsing this site on a personal device on a non-university network avoids that consideration. We collect nothing on our end that identifies an individual student or links a session to a university enrollment record.
Minnesota Privacy Law
Minnesota does not have comprehensive consumer-privacy legislation comparable to California’s CCPA or Virginia’s VCDPA, though state legislators have considered such bills. Minnesota’s data-breach notification law (Minn. Stat. § 325E.61) governs notice obligations in the event of unauthorized access to personal information. Because we do not collect, store, or process personal information beyond basic server logs, this law does not impose specific affirmative obligations on us. If this changes, we will update this policy accordingly.
Changes to This Policy
If we ever change our privacy practices, we will update this page with a new "last verified" date. We have no plans to add tracking or analytics.
Related on this site: Send a Message, Contact TwinCitiesCannabis.org, About TwinCitiesCannabis.org.