Privacy Policy

1. Introduction

The Cigar Library ("we," "our," or "us") runs the app at app.thecigarlibrary.com. The Cigar Library is run by TeqBean Holdings, LLC, 7901 4th St N, Ste 300, St. Petersburg, FL 33702, USA, which is responsible for your information under this policy (its "controller," in the words of data protection law). This policy explains what we collect, how we use it, who else handles it, what other members can see, and how long we keep it. We don't sell your personal information, and we don't use advertising or tracking cookies. Where we offer this policy in another language, the English version governs if they differ.

2. Information We Collect

Account information

• Email address and first and last name (required)
• Password, stored only as a one-way hash; we never see or store it in readable form
• Date of birth (required, to confirm you are old enough to use the app: section 12)
• Display name (until you choose one, we make one from your first name and a number)
• Profile photo and social media links (optional)
• Home and work addresses (optional)
• Mobile number (optional; for verification and text notifications you turn on)
• Time zone, taken from your browser when you first open the app and changeable in Settings, so reminders show your local time and arrive in your morning
• The language you choose for the app. Emails, texts and notifications we send you use it where we have them in that language, and English otherwise
• The country you signed up from, as our network provider, Cloudflare, works it out from your IP address when you create your account. We use it to choose your starting currency and language until you choose them or add an address, to decide which notification defaults apply to you (section 8), and to apply the minimum age set for your country (section 12). It isn't shown to other members, and we keep it while your account exists
• If you sign in with Google: your name, email address and profile photo from your Google account

Your collection and activity

• Humidors, cigars (including what you paid, quantities and photos), wishlist and favorites
• Reviews, tasting notes, smoking sessions and cigar history
• Lounge reviews, check-ins and lounges you add
• Challenge progress and points, feedback and votes, and the reactions you give to blog posts
• Bug reports you send: what you describe, the page, up to 3 screenshots, and the app version, browser, screen size and recent errors in the app, all shown to you before you send it. Screenshots are private to you and our review team
• If you test the app for us (a beta tester, or staff at a pilot lounge or HERF): your beta status reports and interview answers, your results in the in-app testing guide (which steps worked or had a problem, and when) and the points they earned. They are deleted with your account
• Forum posts, direct messages, social circles, shared humidors, event RSVPs, follows, requests to follow (yours, and those made to you), and the members you block
• The cheers and comments you give, who can see your activity, and whether you have been told of the cheers you got
• The lists of cigars you make: their names, the cigars on them in your order with your notes, and whether each is public or private
• What you post in your circles' discussions
• Your settings and notification preferences
• Your device's location, only when you ask for lounges or events near you; we use it for that search and don't store it, unless you save it as one of your places (below)

Saved places

If you choose to save places in Settings → Addresses → My places (a home, a work place and up to three more, each with a name you give it), we keep each place's name (its city and state or country, and a ZIP or postal code if you typed one) and a point rounded to about 1 km, never a street address, and the distance you choose for "nearby". Nothing is kept until you save a place. We use them only to show you events near them and, when your event reminders are on, to email you about events within that distance. They aren't shown to other members or lounges, and no screen in the app shows them to our staff. To find a place you type, or to name your current location, your browser asks OpenStreetMap (section 6); your location is rounded to about 1 km first. You can remove a place at any time; your places are in the copy of your data you can download, and are deleted with your account.

Support requests

If you write to us from the Support page, we keep the subject and message you send and our answers. If you aren't signed in, we also keep the email address you give, to answer you by email; if you are, the request is part of your account and you can read our answers in Feedback → My Submissions.

Lounge and HERF rosters

A lounge or HERF that runs its membership in the app keeps a roster, which can include people who don't have an account with us: the name and email address its staff add or import (and a phone or member number, if they add one), and whether and when it invited them to join. We keep these records for the lounge or HERF and use them only to run its roster and send its invitations; it is responsible for being allowed to email the people it adds. To be taken off a roster, ask the lounge or HERF, or contact us (section 15).

At the door, a lounge's staff record when you come in and when you leave (you can also check out on your member card), and, when you bring a guest, that you were their host and whether it used one of your guest passes. A guest without an account is recorded by name, with an email address if they give one, and whether staff checked their ID (never a copy of it). If the lounge runs loyalty points, it keeps your points history: points earned for visits, points its staff added for what you spent and rewards you redeemed, each with who recorded it and when, which you see on your member card. Points have no cash value. A lounge with several locations can make a membership valid at all of them: each location's staff then see your name, member number and that membership at their door, and record your visits and your guests there.

Agreements and legal statements

If you claim a lounge or HERF, add a group to run, check out a plan for one, or accept the agreement in its console as its owner, we record that you agreed to our Lounge and HERF Subscriber Agreement, which version, and when. Some settings can be turned on only after someone ticks a legal statement: a lounge's or HERF's owner, that they have checked with their own lawyer that its loyalty program, or showing its prices publicly, is allowed where it is; one of our administrators, that counsel confirmed the minimum age set for a country. We keep a record of each statement (who ticked it, when, which statement and its version, and what it was for) as evidence of what was confirmed, including after the setting is turned off.

Payments

Stripe processes subscription payments. Your card details go directly to Stripe; we never receive or store them. We keep your plan, billing period and the Stripe identifiers needed to manage your subscription. If you sign up with a trial code, we record which code, to count how each code is used. We also keep a record of each payment, refund and failed payment, on our website or in the App Store (the amount, the plan and the date, never card details), for 7 years, and of the free trials, discounts and comps on your account, for our own business reporting. If you join through a referral link or code, or refer someone, we record who referred whom and the referral rewards given (see the Referral Program Terms). To stop people referring themselves, we compare the card used for a referred member's first payment with the cards saved by the member who referred them, using the card fingerprint Stripe gives us, never the card number. We also compare the IP addresses and device details (the browser and operating system a device reports) in the security log from when the two members signed in or signed up, within 30 days before or after the new member signed up: if the same IP address and device details appear for both, one of our administrators reviews the referral before its reward is given. A referring member's free month waits at least 30 days after the new member signs up.

So that a free trial, and each promotion, is given once per person, we keep a record of the email addresses and payment cards that have had one: a keyed hash of the email address (read the same way whatever its capitals, +tags or, for Gmail, dots) and of the card fingerprint Stripe gives us, which offer it was (a free trial, or which promotion) and when it was first used. Without our secret key, the record can't be matched to an address or a card, and it doesn't point to your account. We keep it for 2 years after first use, even after you delete your account, and use it only to stop free trials and promotions being used again.

How you use the app

We record when you sign in and how many minutes a day you have the app open, to see how often members come back. These records are deleted after 12 months. We also count how many times each page, library cigar and lounge is opened each day, as one total for everyone: those counts never record who opened what. Only our administrators see these figures.

If you arrive from a link that names a campaign (for example an ad, a newsletter or a post, with "utm_" in its address), we remember on your browser for 30 days the campaign's source, medium and name, and whether the link was a referral link or a Google Ads link, never the referral code or the ad's click identifier (section 11). If you then create an account, we keep those with your account, to learn which campaigns bring members. Only our administrators see them, and they are deleted with your account.

If you cancel your plan in the app, you can tell us why. We keep your answer with your account, send it to Stripe with the cancellation, and count the answers for our own business reporting. It is deleted with your account.

Security and technical data

• A security log of sign-ins (successful and failed), password and email changes, two-factor changes and other account events, with the IP address and browser details at the time
• Two-factor authentication secrets and backup codes, stored encrypted
• Push notification subscriptions for the browsers where you turn them on, and the push token of each device where you use the iPhone app with notifications on
• In the iPhone app, your sign-in is kept in the phone's Keychain, not in a cookie, and removed when you sign out
• If you subscribe in the iPhone app, the App Store's record of that subscription: which plan, when it renews or ends, and whether it was refunded. Apple handles the payment; we never see your card.

Wallet cards

If you add a lounge membership card to Apple Wallet, the card (the lounge's name, your name, member number, membership and a code the lounge's door accepts) is stored in that wallet on your device. Apple may keep it in your iCloud backup. We keep a record of the card and an identifier for each device it's on and a token for sending updates, until the card is cancelled.

3. How We Use Your Information

• Run the app: store your collection, show your statistics and history, and apply your plan
• Recommendations: suggest cigars from your ratings, reviews and sessions
• AI features: build your flavor wheel from your review notes and aromas, write Cigar of the Day notes, and read the band in a photo you take in Add Cigar to suggest cigars from our library. We don't keep that photo: it is read and then discarded.
• Notifications: send account emails (verification, password resets, security alerts) and the reminders, digests and alerts you choose
• Messaging: deliver messages between members, and by email or text if the recipient turned that on
• Community: run the forum, circles, events, challenges, the leaderboard and the master cigar library
• Age check: your date of birth confirms that you are old enough to use the app, as the Terms require: 21, or the lower minimum age set for the country you signed up from (section 12). We don't use it for anything else, and it isn't shown to other members unless you put it on your member tile.
• Security: protect accounts, investigate abuse and prevent fraud
• Running the business: count members, plans, payments, trials and how the app is used, to see what works

Our legal bases (UK and EU)

If you are in the United Kingdom, the European Union or the European Economic Area, data protection law (the UK GDPR and the EU GDPR) asks us to name the legal basis for each use of your information. They are:

Where we rely on legitimate interests, you can object (section 10). Where we rely on consent, you can withdraw it at any time, in Settings or by contacting us, without affecting what we did before.

4. What Other Members Can See

Your collection, humidors, wishlist, sessions and unshared reviews are private. Other members don't see your email address, phone number, addresses, birthday or social links unless you add them to your member tile (below). They can see:

• Your display name and profile photo
• Reviews and lounge reviews you choose to share, after an admin approves them, including their notes and photos
• Smoking sessions you make public: the cigar, your rating and notes and the lounge, never a place you typed or your position
• The challenges you complete and your public check-ins at lounges on the lounge list
• Your cheers and comments on what other members share
• Your forum posts, and messages you send to them
• Your lists you make public, with their cigars and notes
• Your membership, public check-ins and RSVPs in circles and events you join, and, to the circle's members only, what you post in its discussion
• Your name and cigars in shared humidors you belong to
• Your leaderboard position and collection statistics, only if you turn on sharing your stats
• Your member tile, which any signed-in member can open wherever your name or photo appears
• Your profile page, opened from your tile: your display name and photo, the badges you hold, when you joined, and, as Who can see your activity (below) allows, how many cigars and brands you hold (only if you turn on sharing your stats), how many shared reviews, public sessions and completed challenges you have, who follows you and whom you follow, your posts and your public lists

Member tile: it shows your display name and profile photo. Nothing else is on it unless you turn on sharing in Settings → Profile and choose each item yourself: your social links, email address, mobile number, home address, work address or birthday. We ask you to confirm before your email address, mobile number, an address or your birthday goes on it. Every signed-in member can then see what you chose, and may copy it. Turning sharing off in the same place removes everything from your tile at once and clears your choices; unticking an item removes just that item. Tiles of archived accounts aren't shown.

Who can see your activity: your shared reviews, public sessions, completed challenges, check-ins and lists, and the cheers and comments on them, are shown to every signed-in member unless you choose otherwise in Settings → Privacy: anyone (below), your followers only (anyone who follows you), or only you; a member it keeps out sees only your name and photo on your profile. While you choose followers only, a member who follows you asks first: you see their request in Settings → Privacy and approve or decline it, and they see that it is waiting. We keep a request until you answer it, they withdraw it, either of you blocks the other, or either account is deleted; choosing another setting approves every request waiting. A list you make private is yours alone whatever you choose. Members who follow you see your posts in their Following feed. None of this is on the public web unless you choose Anyone: then your profile (your display name and photo, when you joined, how many published reviews, public sessions and completed challenges you have, and your published reviews) and each review you publish have a page anyone with the link can open without an account, and search engines may list your published reviews, never your profile. A list's link opens only in the app, for signed-in members. Who cheered is not shown, only how many did; a comment shows its author's display name. You can edit or delete your comments, and delete anyone's comment on your own posts. We tell you of new followers and follow requests, replies to your forum posts, comments on your posts and new discussions in your circles by a push notification, of cheers in one push a day, and of your week in a Monday email; none of these names the member, and each can be turned off in Settings → Notifications.

Blocking: a member you block sees none of this, and you see none of theirs; neither of you can message or follow the other, and we don't tell them. We keep whom you blocked and when, until you unblock them (Settings → Privacy) or either account is deleted. It is in the copy of your data, not in theirs. Our admins and moderators still see everything.

Master library: when you add a cigar the library doesn't have, we suggest it to the library for admin review. By default only catalogue details are sent (name, brand, size, shape, strength, wrapper, binder, filler, origin and flavor notes), without what you paid, your rating, notes or photos, and other members aren't told who suggested it. You can turn suggestions off in Settings.

If you turn on Share full details and get credit, your suggestions also include your notes, rating, what you paid and your photos, and approved entries show your display name as the contributor. If a suggestion is turned down, its photos are deleted unless something else in the app still shows them. Turning it off applies to new suggestions; ask us if you want details removed from entries already in the library.

Shared lockers: if you rent a locker at a lounge and share it with other members, they see your display name, the locker's label and what's in it, but not your rental dates, payments or rental agreement. You see the display names of the people you share it with, and the lounge's staff see them by the names on the lounge's roster. Everyone sharing a locker can add, change and take out what's in it, and the lounge's locker log records each change with the name of the person who made it. The same applies when a locker is shared with you. Your access to a locker shared with you ends when you stop sharing it, when the renter or the lounge's staff remove you, when the rental ends, or when you leave the lounge. Deleting your account removes your place in every locker shared with you.

Photos: a photo on a lounge you submit is reviewed before other members can see it (section 5). Until then it is stored privately and only you and our reviewers can open it. Once published, photos are stored at long, unguessable web addresses so the app can show them. Anyone who has a photo's address can open it, so a shared photo can be passed on by people who see it.

Blog: our blog is public, on our website and in the app. Its posts are written by our administrators and by Editors, members an administrator has given that role, which lets them write the blog and nothing else in our admin tools. A post shows its author's display name to anyone who reads it. Reactions to a post are shown only as counts, never who reacted.

HERF and club pages: a HERF's organizers can choose to give their group a public page, which anyone can open without an account and search engines may list. It shows only what the organizers put on the group's listing: its name, town and region, description, when it meets, how to join, its logo and photos (after our review), the lounges it meets at, its meetups that are open to everyone, and, only if the organizers choose to show them, its dues, its links and its contact email. It never shows who the group's members or organizers are, how many members it has, an address or Plus Code, or its members-only meetups. Organizers can turn the page, or any of those choices, off at any time in the group's Settings, and we can turn them off too. Organizers should add only photos of people who have agreed to be shown publicly; to have a photo removed, ask the group's organizers or contact us (section 15).

5. Photo Moderation

Every photo you upload is checked automatically when you upload it. A photo on a lounge you submit is also looked at by a person before other members can see it, and a review you share or a cigar you suggest for the library is approved by us, photos included, before it appears. Nobody looks at the photos in your own collection. What the Terms of Service allow and prohibit in a photo is set out in their User Content section; this section is about the data behind that.

What is scanned, and by whom

• Amazon Web Services (AWS Rekognition): we send each uploaded photo to Rekognition, which returns labels for sexual, suggestive, violent or hateful content and how confident it is. It receives the image and nothing that identifies you, and we use the result only to decide how the photo is handled.
• Anthropic (Claude): gives a second opinion on the same question, so one service's mistake does not decide on its own. It receives the image only. For a photo of a cigar in your collection, it is also asked, once the photo is on a cigar, whether another website's logo, name or web address is laid over it.
• Known child sexual abuse material: each photo is matched against hashes of images already identified as child sexual abuse material, by Arachnid Shield, a service of the Canadian Centre for Child Protection, before it is stored. A match means the file is already known, not that software formed an opinion about the picture.
• A person: automated checks get things wrong in both directions, so they sort the queue and a reviewer decides. A photo that was approved can still be reported later and looked at again.

What we store about a photo

• A rating for the photo — not yet rated, ordinary, marked as sensitive, or marked for a closer look — with the labels and confidence the automated check returned and which service returned them
• Whether the photo is waiting, published or rejected, which reviewer decided, and when
• Your Show photos marked as sensitive setting. Revealing a single sensitive photo isn't recorded; it lasts for that visit only.
• For a photo of a cigar in your collection, whether it shows another website's logo, name or web address. While we choose not to show such photos, it is hidden everywhere in the app except that cigar's edit form, where you can delete it and add your own. The photo itself is never changed.

Who can see a photo that is waiting for review

You can, our administrators can, and so can any member an administrator has appointed as a moderator. Nobody else can: a waiting photo is kept in private storage that our public photo address does not serve, so there is no link to it.

About moderators: a moderator is a trusted member of the community, not an employee. The role lets them work the photo and report queues, which means they see photos waiting for review before anyone else does, and what members have reported. It gives them nothing else — no member list, no email addresses or phone numbers, no collections, no billing, no security log, and no way to change anyone's role. We record who was given the role and when, and the queue decisions each reviewer made.

Location, camera and timestamp details

Before a photo is stored we remove the data your phone or camera writes into the file — where it was taken, when, and on which device. We remove it rather than keep it, so it is neither in the copy other members see nor in the copy we hold, and a photo you share doesn't say where you were.

Reports

When you report a photo, a review, a forum post, a comment, a message sent to you or a member's profile we keep what you reported, the reason you chose, anything you wrote, and what we decided. We email you the outcome. The member you reported is not told who reported them. A message you report is shown to our moderators.

When you ask for another look at something we removed, we keep what you wrote with the outcome: who decided, when, and what they decided.

Rejected photos

A rejected photo is deleted from storage and cleared from our cache, so its address stops working. Rejection removes a photo rather than hiding it. We keep a record that a photo was rejected, and on which account, so we can act on repeated violations.

Photos that appear to be child sexual abuse material

One case is handled differently, and it is the only one. When a photo appears to be child sexual abuse material, United States law (18 U.S.C. §2258A) requires us to report it to the National Center for Missing and Exploited Children and to preserve the image and the related account information instead of deleting it. We keep them for at least one year from the report, and longer if law enforcement asks us to. When that happens we suspend the account, and the photo is never shown to any member or reviewer. The preserved copy is held only for that purpose and is not used for anything else. This is the one exception to what this policy says elsewhere about deleting photos and deleting your account.

6. Service Providers

These companies handle data for us, only to provide their service:

• Render: hosts the app and its database in the United States
• Cloudflare: stores photos (R2), runs our domain's DNS, and matches the photos it serves against hashes of known child sexual abuse material. When you create an account or reset a password, its Turnstile check, which sees your IP address and browser, tells us whether you are a person
• Amazon Web Services: AWS Rekognition rates uploaded photos for sexual and suggestive content (section 5). It receives the image only.
• Canadian Centre for Child Protection: its Arachnid Shield service checks each uploaded photo against known child sexual abuse material (section 5). It receives the image only.
• Stripe: processes payments
• Resend: sends email, keeps a copy of each email it sends for up to 30 days, and tells us whether it was delivered, bounced or marked as spam (section 9)
• Twilio: sends text messages, only if you add and verify a US or Canadian mobile number and turn them on. What we send, how often, and how to stop it is set out on our text messages page.
• Anthropic: the Claude AI model builds your flavor wheel from your review notes and writes Cigar of the Day notes, gives a second opinion on uploaded photos, and checks cigar photos for another website's watermark (section 5). When you take a photo of a cigar's band in Add Cigar, it reads the brand and line from it; it receives the image only, without the location and other details your camera stores in the file. Anthropic does not use this data to train its models.
• Google: sign-in with Google, if you use it, and address validation that places lounges on the map. When you save a new or changed home or work address in Settings, or press Validate again next to it, it is sent to Google to check that it is complete and correct.
• OpenStreetMap: your browser loads map tiles from OpenStreetMap, and sends it the places you search for and, when you use your current location, its coordinates (to show the place name)
• RapidAPI: the cigar catalog lookup in the Add Cigar form sends it the cigar name you type. Nothing that identifies you goes with it.
• Brave Search: we search it for photos of cigars in our master library. It receives only the cigars' names, nothing about you.
• Browser push services (such as Google, Apple, Mozilla or Microsoft): deliver push notifications you turn on
• Apple Push Notification service: delivers the push notifications you turn on in the iPhone app
• Apple App Store: takes the payment for a subscription you buy in the iPhone app and tells us its status (the plan, renewals, the end date and any refund)
• Apple: if you add a lounge card to Apple Wallet, Apple's push service tells your device when the card has changed, so Wallet fetches the new one from us
• Sentry: receives reports of errors in the app and in your browser so we can fix them. We set these reports to leave out names, email addresses, phone numbers, IP addresses, cookies, and what you enter in forms and searches; some include your account's internal ID.

When you choose a password, we check it against a database of passwords exposed in data breaches. Only the first five characters of a one-way hash of the password leave our servers, never the password itself.

We may also disclose information when the law requires it, to protect members or our rights, or as part of a merger, acquisition or sale of the business, in which case this policy continues to apply.

7. Security

• All connections to the app use HTTPS
• Our hosting and storage providers encrypt stored data at rest
• Passwords are stored as one-way hashes; two-factor secrets and backup codes are encrypted
• Two-factor authentication (authenticator app or email code) is available for every account
• New passwords are checked against known breached passwords

Messages and other content are not end-to-end encrypted; our systems can read them in order to deliver and store them.

8. Your Privacy Choices

• Sharing reviews: choose which reviews to share; only approved ones appear to others
• Photos marked as sensitive: shown blurred unless you turn on Show photos marked as sensitive in Settings; you can also reveal one photo at a time, which isn't remembered. Your own photos are never blurred for you.
• Leaderboard and statistics: off unless you turn on sharing your stats
• Master library suggestions: catalogue details only, on by default; turn off in Settings
• Sharing full details with the library: off unless you turn it on, which credits you by display name
• Email, text and push notifications: choose each kind in Settings; signing out turns push notifications off on that device. Notification and news emails have an unsubscribe link; account and security email (verification, password resets, sign-in codes, receipts and privacy requests) always comes. If email to your address bounces, we stop sending to it until you change it in Settings
• Marketing email: news and offers only with your consent, and you can withdraw it at any time. "New in the Library" emails and lounge event notices are on to start with if you signed up from the United States, and off until you turn them on if you signed up from anywhere else, or from a country we couldn't tell. For accounts made before this change, they stayed on if your address, or without one the country you signed up from, or without either the time zone in your settings, is in the United States; for everyone else we turned them off and said so on Home. You can turn each on or off in Settings → Notifications, and each email has an unsubscribe link. Reminders for events you said you'll attend aren't marketing, and stay on unless you turn them off
• Profile details: addresses, phone number and social links are optional; your date of birth is required, and is private unless you put it on your member tile. You can't change it yourself: email support and we'll correct it.
• Member tile: off unless you turn it on in Settings → Profile; you choose each item on it

9. How Long We Keep Data

• Your account: kept while your account exists, including your date of birth, which is deleted with the account
• Photos: a photo you upload but never save, or that nothing in the app shows any more after you edit or delete what it was on, is deleted within about two days. A rejected photo is deleted when it is rejected. The photo ratings and review decisions in section 5 are kept while the photo exists.
• Photo backups: we keep a backup copy of uploaded photos in private storage, refreshed daily, so we can restore a photo lost by mistake. When a photo is deleted, by you, by us, or because you delete your account, its backup copy is deleted automatically within 30 days.
• Photos reported to the authorities: a photo that appears to be child sexual abuse material is kept for at least one year from the report, and longer if law enforcement asks us to, with the related account information, because 18 U.S.C. §2258A requires it (section 5)
• Inactive Petit Corona accounts: archived after 1 year without use (we email you 7 days before). Archived data is kept for one year so the account can be restored; an account still archived after that is deleted, as described under "When you delete your account" below.
• Security log: after 90 days, IP addresses and browser details are removed from entries, and the email address typed into a failed sign-in is replaced by a code that can't be turned back into it; the entries themselves are kept for one year to protect accounts, then deleted
• Blocked addresses: an IP address or range our administrators block is removed from the list 90 days after the block ends or is lifted; the security log's record of the block is kept like other entries
• Changes sent from offline mode: when the app sends a change you made offline, we keep our answer to it for 7 days, so a change sent twice is saved only once, then delete it; it is also deleted with your account
• Sign-ins and time in the app: deleted 12 months after they happened
• Free trials and promotions used: the coded record of which email addresses and payment cards have had a free trial or a promotion (section 2) is kept for 2 years after first use, then deleted
• Sales records: if we have contacted you or your business about The Cigar Library, our record of you, with our notes and any invitation page we sent, is deleted three years after our last contact or activity with you
• Privacy requests: our record of a request for a copy of your data or its deletion (section 10) is deleted three years after we received it
• Support requests: a request sent from the Support page without signing in, with your email address and our answers, is deleted 12 months after we close it; one sent while signed in is kept with your account and deleted with it
• Email delivery records: what our email provider reports about the email we send you (delivered, bounced, marked as spam) is kept for 13 months, then deleted; it is also deleted with your account

When you delete your account

You can delete your account at any time in Settings → Privacy, or ask us by email (section 10). It takes effect immediately and can't be undone. Before your address is erased, we email you what was deleted and what is kept.

• Deleted: your profile and member tile, collection, reviews and lounge reviews, sessions, wishlist, favorites, check-ins, RSVPs, forum posts and circle discussion posts, lists, cheers and comments (yours, and others' on your posts and lists), circle and shared-humidor memberships, circles and shared humidors you own and events you organize, lounge events you submitted that no admin has approved, lounges you added privately, feedback, bug reports and votes, beta reports and testing-guide results, blog reactions, your referral code and the referrals you made, push subscriptions and the iPhone app's push tokens, the devices your Wallet cards were on, your sign-in and time-in-the-app records, your email delivery records, the photos you uploaded, your waitlist entry, shared-humidor invitations sent to your email address, your place in lockers others shared with you, your customer record at Stripe, and the texts we sent to your mobile number or received from it, at Twilio. A forum thread you started that others replied to stays for their replies, without your title or text.
• Cancelled: any paid subscription on our website, right away and without a refund for the rest of the period. A subscription bought in the App Store or on Google Play can only be cancelled there, so cancel it before you delete the account; the store's record of what it billed is kept without your name
• Kept without your name: messages you sent stay with their recipients, and cigars you contributed stay in the master library, as do public lounges you added, with any photos you shared with them; lounge events of yours an admin approved stay on the lounge's calendar; a record of verification codes texted to your number in the last day is kept for about a day after each code was sent, so the daily text limits still apply; our record of the payments, refunds and failed payments on your account is kept, without your name, as the record of what was billed; if someone referred you, their referral stays in their history as "Former member"; blog posts you wrote as an Editor stay published, under The Cigar Library's name; and if you unsubscribed, or email to you bounced or was marked as spam, your email address alone stays on our do-not-email list so it is never emailed again
• Kept as a coded record: that your email address, and any card you paid with, had a free trial or a promotion, as keyed hashes rather than the address or card itself, for 2 years after first use, so they aren't given again (section 2)
• Kept in the security log: account events, with every email address you used on the account replaced by a code that can't be turned back into it; IP addresses and browser details are removed on the usual schedule
• Kept by a lounge you belonged to: its records of your membership, bookings, lockers, payments and loyalty points, and its locker log of what you put in or took out of a locker, under the name "Former member" and without your email, phone, staff notes or account, so it can settle a locker or dues
• Payment and tax records: kept for 7 years, as tax law requires, without your name or contact details. Stripe and the app stores keep the payment records they must keep by law.
• Our record of a privacy request: that you asked and when we answered, kept for 3 years from the request, with your email address replaced by a code
• Emails: copies of emails we sent you are kept by our email provider for up to 30 days
• Backups: our database backups are replaced within 30 days, after which no copy of your account remains

10. Your Rights

Depending on where you live, you may have the right to access, correct, delete or receive a copy of your personal data, to object to or restrict some processing, and to withdraw consent. You can see and change most of your data in the app. We will not treat you differently for using these rights.

How to ask for a copy of your data, its correction or its deletion

• In the app: Settings → Privacy. Download my data gives you a copy of everything we hold about your account at once. Ask for a correction tells us what is wrong and what it should say, for anything you can't change yourself in Settings. Delete my account and data deletes it at once, after you confirm with your password.
• By email: write to support@thecigarlibrary.com, saying whether you want a copy, a correction (and what to correct) or deletion. Being signed in is how we know a request in the app is yours; for a request by email, we send a link to the email address on the account and act once you confirm from it. We never send anything to an address that has no account, and we don't say whether an address has one.
• When: we answer within 30 days of receiving your request. A copy comes as a download link that works for 7 days. When we delete an account, we email what was deleted and what is kept, and for how long (section 9).

Complaints

If you're unhappy with how we handle your information, we'd like the chance to put it right (section 15), but you can complain to a regulator at any time. In the United Kingdom, that is the Information Commissioner's Office (ico.org.uk). In the European Union or the European Economic Area, it is the data protection authority where you live, where you work, or where you believe the law was broken.

11. Cookies and Local Storage

Most of what follows is essential: without it the app can't work, keep you signed in, or keep you safe. The referral and campaign cookies aren't essential, and we ask first where the law requires it (below).

• A sign-in cookie keeps you signed in (for 30 days with "Remember me", otherwise until you close the browser)
• Your browser stores display preferences such as the theme and dismissed tips
• Your choice about the cookies that aren't essential, so we don't ask again
• When you open a member's referral link, a cookie remembers their referral code for 30 days, so the referral counts if you create an account
• When you open a link that names a campaign, a cookie remembers the campaign for 30 days (section 2, "How you use the app"); a later campaign link replaces it. It is our own cookie, read only by us, and only when you create an account
• When you confirm your age to read the blog without signing in, your browser remembers only that you passed; the date of birth you give isn't sent to us or kept
• While you finish a two-step sign-in, the browser tab keeps your email address until you're signed in or close it
• The app stores its own files on your device so it loads quickly
• When offline mode is on, so the app works without a connection, it also keeps a copy of your account details, your own library (humidors, cigars, wishlist, reviews and smoking sessions), the shared humidors you belong to and your lounge member cards on your device. This copy is deleted when you sign out, and after 14 days without a connection. Changes you make without a connection, and their photos, stay on your device until they are sent or you sign out. It is not kept if you sign in without "Remember me". While offline mode is off, the app does not store your personal data on your device.
• If you run a lounge's door with offline mode on, the device also keeps a short list of the lounge's members (name, member number, membership and whether their ID was checked) and the day's check-ins for 24 hours, so check-in works without a connection. It is deleted when you sign out.

If you visit from the United Kingdom, the European Union or the European Economic Area, or from somewhere we can't tell, we ask before setting the referral and campaign cookies, and set them only if you agree; elsewhere they are set as described above. You can change your choice at any time from the cookie link at the foot of our website's pages. Without them, a referral code you type when you create an account still counts.

We don't use advertising cookies, and no other company's analytics or tracking cookies.

12. Age Requirement

The app is for adults: people 21 or older, or, where we have set a lower minimum age for the country you signed up from (section 2), that age, which is never under 18. Our administrators set a country's age only after counsel has confirmed it. Where we can't tell your country, the minimum age is 21. We ask for your date of birth when you create an account, and if you sign up with Google, the first time you open the app; you can't use the app until you give one. Visitors to our blog who aren't signed in confirm their age on that browser first (section 11). We don't knowingly collect information from anyone younger: if the date you give shows you are under the minimum age, we delete the account and its data at once. If we learn later that a member is younger, we delete their account too.

13. International Users

We store and process data in the United States. Some service providers may process it in other countries. By using the app you understand that your information will be handled in the United States.

If you are in the United Kingdom, the European Union or the European Economic Area, we collect your information ourselves and hold it in the United States, whose data protection laws differ from yours. Your rights under this policy (section 10) apply wherever it is held.

Our representatives in the UK and the EU

Because we offer the app to people in the United Kingdom and the European Union without being established there, we are appointing a representative in each and will name them here. Until then, you or a data protection authority can contact us directly (section 15).

14. Changes to This Policy

We will post any changes on this page with a new date, and tell you by email or in the app before significant changes take effect.

15. Contact Us

For privacy questions or requests, email support@thecigarlibrary.com, or write to TeqBean Holdings, LLC, 7901 4th St N, Ste 300, St. Petersburg, FL 33702, USA.