Privacy Policy
Last updated July 18, 2026
Good Ash Co is a small, early-stage project. This policy describes exactly what the site collects and why — I’d rather under-promise and over-deliver here than publish boilerplate that doesn’t match what the code actually does.
What I collect
- Account email, if you create an account for the palate journal — used for sign-in and account recovery, handled by Amazon Cognito. Your password is never stored or seen by me directly.
- Journal entries you write: the cigar, your rating, flavor tags, strength, and any notes — plus a photo, if you attach one.
- A palate profile, computed automatically from your journal entries — not something you enter separately.
- Outbound click data, if you click a retailer link from the site or a deal-digest email: which product and retailer, and when. This is how affiliate commissions get attributed correctly, and it’s the only data tied to purchases I ever see (I don’t see what you actually buy or how much you paid).
- Anonymous site analytics via Plausible, a privacy-focused analytics tool that doesn’t use cookies and doesn’t collect personal data — just aggregate page-view counts, referrers, and country-level location.
How I use it
To run the journal and generate recommendations. Recommendations are computed by Amazon Bedrock (Anthropic’s Claude model, via AWS) using your palate profile and recent notes — your notes are treated as data for the model to reason about, never as instructions it follows.
To send a weekly deal-digest email, if you’ve opted in, and to track which retailer links convert, for affiliate reporting.
Who I share it with
I don’t sell your data, and I don’t share it for advertising. The only outside parties involved are the infrastructure providers that make the site work: Amazon Web Services (hosting, database, authentication), Amazon Bedrock (recommendations), and Plausible (analytics).
Deleting your data
You can delete your account at any time from your Account page. That permanently removes your journal entries, palate profile, and account record. Outbound click history is anonymized rather than deleted — your identifying info is replaced with a random token, so the record can’t be traced back to you, but aggregate reporting for retailer partnerships stays intact. That’s a deliberate design choice, not an oversight, and I wanted it stated plainly here rather than discovered later.
Age
Good Ash Co is a tobacco-related product. You must be 21 or older to create an account, and the site isn’t directed at anyone younger.
Questions
hello@goodashco.com, or see /contact.