Privacy Policy

About this policy

This policy explains how information is handled when you visit cbddiff.com, use its calculators, submit a review or contact us. CBD Diff is an information, comparison and editorial website with affiliate links. It does not sell products directly.

Analytics cookie choices apply to analytics only. They do not provide consent for every use of information described here or acceptance of our Terms of Use.

Who operates CBD Diff

CBD Diff LTD, United States, operates this website and is the contact for questions about its handling of personal information.

4900 California Avenue West Park Community, Tower B, 2nd floor, Bakersfield, CA 93309, United States.

Email: [email protected]. Our Contact page provides the same email contact; there is no contact form.

Information we collect and why

• Site visits: network and request information, including IP addresses, is processed to deliver and protect the site through Cloudflare. This is separate from analytics cookies.
• Analytics: when Google Analytics is enabled, limited measurements are sent before analytics cookie agreement. Agreement permits browser identifiers for measuring sessions and repeat visits. The details and controls are below.
• Reviews: we receive your chosen nickname, score, optional comment and the product being reviewed. We also process submission identifiers, security checks and moderation records to operate the review system and reduce abuse.
• Email: when you contact us, we receive your email address, message, attachments and any other information you choose to provide. We use these to understand and respond to your request.
• Calculators: the numbers you enter are processed in your browser. The calculator functions do not save those entries or send them to a calculator service. Copying a result places it on your clipboard. Other requests made by the page, such as analytics or hosting requests, are separate.

Ratings, reviews and public content

The review form accepts a nickname, a whole-number score from 0 to 5 and an optional comment. Reviews await moderation. Published reviews make the nickname, score, comment and publication date publicly accessible. Published scores also contribute to rating summaries.

Pending and rejected reviews are not displayed publicly, but this does not mean they have been deleted. Internal records include product and submission IDs, timestamps, status, hashed visitor and verification identifiers, and moderation decisions and reasons. Pseudonymous identifiers and hashes are not the same as fully anonymous information.

Your browser stores a private review credential and, before an attempted submission, a copy of the product ID, score, nickname, comment and request ID. This allows an uncertain submission to be retried without silently creating a new one. The pending browser copy is cleared after a confirmed accepted response or certain final errors; an uncertain response can leave it stored for retry. The credential and unresolved submission have no automatic time-based expiry in this implementation.

Clearing site storage removes browser-held information but does not delete an already submitted review from our records. The site does not offer a visitor editing or deletion interface. Contact us about a review or a personal-information request. Removing a review from public display is different from deleting its stored record.

Please do not include medical details, private contact information or another person’s personal information in a review. Choose a nickname you are comfortable making public.

Analytics, cookies and local storage

Before agreement and after withdrawal

Where enabled, Google Analytics loads using Advanced Consent Mode with analytics storage denied before measurement starts. In this limited mode, the integration does not allow analytics cookies to be read or written. Google can still receive measurement and consent requests.

These requests can include the page URL, referrer, timestamp, consent state and browser/device information. URLs may contain query parameters. An IP address is involved in the network connection to Google. Receiving information over that connection is distinct from how Google subsequently processes or retains it. We do not describe this mode as fully anonymous or as an absence of data transmission.¹

After agreement

Selecting “OK, I agree” allows analytics cookies to help distinguish browsers and connect sessions and repeat visits. This does not guarantee recognition of every returning visitor or complete reports. Advertising storage, advertising user data, Google signals and personalization remain disabled in this integration.

Our application does not send calculator entries, review comments, nicknames or review credentials as custom analytics events. Measurement handled by the Google tag can include page visits and interactions according to its configuration; this statement is not a guarantee that every provider-side setting has been independently audited.

What is stored in your browser

• Analytics choice: cbddiff.analytics-consent in localStorage records an explicit agreement or withdrawal and its expiry time. It lasts 180 days from that choice. Visits and dismissal do not extend it.
• Analytics browser cookie: cbddiff_analytics_ga helps Google Analytics distinguish browsers after agreement. Its configured lifetime is 180 days, without renewal on each page load. Withdrawal removes it where browser access permits.
• Analytics session cookie: cbddiff_analytics_ga_<measurement-ID suffix> maintains Google Analytics session state after agreement. It has the same configured 180-day lifetime and withdrawal behavior.
• Review credential: a separate localStorage entry maintains a pseudonymous browser identity for reviews. It has no automatic time-based expiry.
• Unconfirmed review submission: localStorage keeps the exact submission for retry after an uncertain result. It is cleared on confirmed acceptance or specified final errors; otherwise it remains until cleared.

Analytics cookies are configured for the current host and the root path. Browsers can shorten their lifetime or block them. Cookie lifetime and the 180-day choice period are separate from retention of information already received by Google.²

Closing the panel with its close button or Escape does not grant consent or change a previously saved choice. Following links, scrolling and continuing to use the site do not grant consent either. Dismissal is not a saved refusal.

When a saved choice expires, the site returns to limited mode, clears this integration’s analytics cookies where possible and shows the panel again. Background-browser restrictions may delay the check until the page resumes. Choices synchronize between tabs for the same site when browser storage is available. Blocked storage can prevent saving a choice or sharing it between tabs; the current tab remains in limited mode if a choice cannot be saved.

Analytics preferences

Use these controls to reopen the existing consent panel or withdraw a saved agreement. You can return here using “Privacy Policy” in the footer.

Withdrawal denies further use of analytics cookies and attempts to delete only the two cookies configured for this integration. It returns measurement to limited mode: requests without analytics cookies may continue. It does not automatically erase information already received by Google.

The controls do not delete review credentials, unconfirmed reviews or unrelated cookies and storage. They cannot remove cookies belonging to other websites or inaccessible browser scopes. If browser storage is blocked, the site explains when it cannot remember a choice for future visits.

Cloudflare and spam protection

Cloudflare provides hosting for CBD Diff. The review service also uses Cloudflare Workers and D1. Delivering pages and API responses involves processing network/request information, including IP addresses. Cloudflare may process traffic and security information as part of providing its services.³

Cloudflare Turnstile protects review identity creation and submission. It evaluates technical signals such as IP address, browser information, connection characteristics and the site involved. Our backend sends the verification response and an IP address, when available, to Cloudflare for validation.⁴

The review backend uses hashed identifiers for rate limiting and does not store raw IP addresses in its ratings database. This does not mean that Cloudflare never receives or logs IP addresses. The absence of application request/body logging is not a statement about all Cloudflare platform logs.

These service and anti-abuse functions are separate from analytics cookie permission. Withdrawing analytics consent does not disable the infrastructure needed to serve pages or the verification used for reviews.

Affiliate links and external websites

Product links can take you through an outbound countdown page to an external seller and may contain affiliate or campaign parameters. The destination receives the request to its site and may receive referral information according to browser behavior. It may use its own cookies and analytics.

An affiliate relationship does not itself mean we send that seller your review credential, comment or email correspondence. Purchases and further interactions on external websites follow their own terms and privacy policies. Our analytics preference controls apply to this integration on CBD Diff, not to external websites.

Service providers and international processing

Cloudflare processes information for hosting, the review service and security. Google receives information through enabled analytics. Email communications are handled through the email systems used by the sender and recipient. Published reviews are available to other visitors.

CBD Diff LTD is based in the United States, and providers operate internationally. Information may be processed outside your country. This policy does not promise that all information stays in the EU or any other single region. Contact us for information about the processing arrangements relevant to a particular request. Provider notices explain their own practices; they do not replace our responsibilities for this website.³⁵

Data retention

The browser-choice and cookie periods are described above. Review credentials and unresolved browser submissions do not have a built-in expiry. The review system also has no automatic age-based deletion of reviews or moderation history, including rejected records. Published content can remain visible unless withdrawn through moderation.

The backend schedules hourly cleanup of expired rate-limit counters. These short-lived counters are separate from reviews, moderation history and any backups. Cleanup can be delayed by service interruptions or maintenance.

Do not interpret the 180-day analytics choice as a deletion schedule for emails, reviews, backups, hosting logs or provider-held analytics data. This page does not specify a fixed retention period for those categories. You can contact us about the information associated with a particular interaction and available options.

Your privacy rights and choices

Depending on the law applicable to you and the processing involved, you may have rights to request access, correction, deletion, restriction or portability of personal information, object to certain processing, withdraw consent where processing relies on it, or complain to a relevant data-protection authority. These rights can have conditions and exceptions.⁶

Contact [email protected] with enough context to identify your request, such as a page link and the nickname used for a review. Do not send passwords, private review credentials or unnecessary medical details. We may need appropriate information to verify a request. We do not promise automatic deletion of every record, and the absence of a self-service deletion button does not remove rights provided by applicable law.

You can separately manage cookies and site storage in your browser. Clearing storage may remove your saved analytics choice and review credential; it does not remove records already held by us or providers.

Children’s privacy

Please do not submit a child’s personal or medical information in a public review. If you believe information about a child has been submitted, contact us so the situation and applicable requirements can be assessed. This website does not provide an age-verification process.

Changes to this policy

We may update this page when our services or information practices change. Review it for current information. A change to this policy does not itself grant analytics cookie permission.

Contact

For privacy questions or requests, email [email protected] or use the address for CBD Diff LTD above. See also our Contact page.

Sources and provider information