Privacy
Privacy Policy
Effective November 4, 2026. Plain language: what we collect, why, and your choices.
Who we are
Hash Millz is a Washington State I-502 licensed cannabis producer/processor and the home of the Red Mane and Frostco brands. This policy covers our website, hashmillz.com, and its related brand pages. You can reach us at hashmillorders@gmail.com.
What we collect
- 21+ age confirmation. When you confirm you are 21 or older, that choice is stored in your browser so you aren't asked on every visit. It is not sent to us.
- Drop-alert signups. If you sign up for drop alerts, we collect your email address and the brands or products you chose.
- Contact form messages. If you contact us, we collect your name, email address and whatever you write in your message.
- Site analytics. We use Google Analytics and Metricool tracking to understand how visitors use the site, such as pages viewed, approximate location, device and browser type, and how you arrived.
- Cookies and local storage. We and our analytics providers use cookies and browser storage to remember your age confirmation and to measure site use. You can clear or block these in your browser settings.
How we use it
- To show the site only to adults 21+.
- To send drop alerts you asked for.
- To reply to your messages.
- To understand what content is useful and improve the site.
- To meet our legal and regulatory obligations.
We don't sell your data
We do not sell, rent or trade personal information. We share it only with service providers who help us run the site (for example hosting, email delivery and analytics), and only as needed for them to do that work, or when the law requires it.
Unsubscribing from email
Every drop-alert email includes an unsubscribe link. You can also unsubscribe from the Manage Drop Alerts page or by emailing hashmillorders@gmail.com.
How long we keep it
We keep drop-alert emails until you unsubscribe, and contact messages for as long as needed to handle your request and keep normal business records. Analytics data is kept according to our analytics providers' retention settings. We delete or anonymize information when we no longer need it.
Admin-only Google sign-in
Our website administrators sign in with Google (Gmail, Google Search Console and Google Analytics) through our "Hash Millz Admin" app. This is used only by Hash Millz staff to run our own business reporting, such as reading our own business inbox for orders and lab reports, and viewing our own site's search and traffic reports. Website visitors are never asked to sign in with Google.
Google user data is not sold, not shared with third parties, not used for advertising, and not used to build user profiles. Hash Millz's use and transfer of information received from Google APIs follows the Google API Services User Data Policy, including the Limited Use requirements.
Washington My Health My Data Act
We do not collect consumer health data as defined by the Washington My Health My Data Act. Because of that, the Act's consumer health data rights do not apply to the information described in this policy. If that ever changes, we will update this policy before collecting it.
Privacy requests
To ask what information we have about you, correct it, or delete it, email hashmillorders@gmail.com. We'll respond within a reasonable time.
Changes to this policy
If we change this policy, we'll post the new version here and update the effective date.