Privacy policy.

LastSesh (lastsesh.com) is a free field guide to quitting cannabis, a private logbook, and paid accountability coaching. It is run by one person in Newfoundland and Labrador, Canada, who is responsible for the personal information described here. Questions, requests and complaints go to info@lastsesh.com.

• Reading the site needs no account and collects no name or email.
• Your logbook (quit date, check-ins, notes) is health information. Only you can see it, plus your coach if you subscribe to coaching. It is never sold, never used for advertising, and never sent to Google Analytics.
• We use Google Analytics on the public pages to count visits. It is switched off on the sign-in, logbook, admin and post-checkout pages.
• You can download or delete everything from your logbook at any time.

Without an account. The timeline and the cost calculator remember your quit date and spending in your own browser (local storage). That stays on your device and is never sent to us. The night-mode setting is stored the same way.

Usage data. On public pages, Google Analytics records pages viewed, approximate location (city level), device and browser type, and how you arrived. Google signals and advertising features are turned off for this site.

Email list. If you enter your email on the homepage, we keep that address to tell you when a new guide goes up, and for nothing else. Every email has an unsubscribe link.

Account. Your email address and, if you sign in with Google, the name and email Google shares with us. You can add a display name.

Logbook. Your quit date and, for each day you check in: whether you used, craving, mood and sleep scores, and any note you write. If you have coaching, your coach’s replies are stored with them.

Coaching and payment. Your plan, its status and billing dates. Card details are entered on Stripe’s checkout page and go to Stripe, not to us; we see only the last four digits and the billing email Stripe shows us. If you book calls, the booking tool receives the details you give it, and call notes your coach keeps are part of your coaching record.

Email. Anything you send to info@lastsesh.com.

• To run your logbook and show you your own record.
• To deliver coaching: your coach reads your check-ins, replies, and contacts you when you go quiet. That is the service you pay for.
• To take payment and keep the records tax law requires.
• To send the emails you asked for (sign-in links, coach replies, receipts, new-guide emails if you joined the list).
• To see which pages help people, using counts from Google Analytics.
• To keep the site secure and working.

We do not sell personal information, rent lists, run third-party ads, or use your logbook to market to you. We ask for your consent when you create an account or subscribe, and you can withdraw it at any time by deleting your account; some things (like a paid month already in progress, or tax records) end on their own schedule, as explained below.

These companies process data for us, only to provide their service:

• Vercel: hosts the website.
• Supabase: the database and sign-in system that holds your account and logbook.
• Stripe: coaching payments and billing.
• Google: Sign in with Google (if you use it) and Google Analytics on public pages.
• Resend: sends our emails and holds the email list.
• Cal.com: call booking, for 1-on-1 coaching only.

Some of these companies store or process data outside Canada, including in the United States, where it is subject to local law and may be accessed by authorities there. We share personal information with anyone else only if the law requires it, or if there is a serious and immediate risk to someone’s safety.

• Account and logbook: until you delete your account. Deleting removes them from our database right away.
• Payment records: kept as long as Canadian tax law requires (generally six years), even after you delete your account. These hold your email, plan and amounts, never your check-ins.
• Email list: until you unsubscribe.
• Google Analytics: detailed event data is kept for two months and data tied to a browser’s analytics ID for up to fourteen months, then deleted by Google. Reports built from totals are kept.
• Email you send us: as long as needed to answer it.

From your logbook you can download all of your data as a file, and delete your account and everything in it. You can also write to info@lastsesh.com to ask what we hold about you, to correct it, or to withdraw consent. We answer within 30 days.

To block Google Analytics everywhere, use Google’s opt-out add-on or any tracker blocker; the site works the same without it.

If you are not satisfied with our answer, you can complain to the Office of the Privacy Commissioner of Canada at priv.gc.ca.

Check-ins about cannabis use are consumer health data under laws such as Washington’s My Health My Data Act. We collect it only to run the logbook and coaching you signed up for, share it only with the processors above, never sell it, and you can access or delete it at any time as described in section 7. Residents of states with privacy rights (including California, Washington, Colorado and others) can use those same tools or write to info@lastsesh.com; we treat every request the same way, wherever you live, and will not treat you differently for using your rights.

Data travels over HTTPS. Database rules make each logbook readable only by its owner and the coach. Sign-in uses one-time email links or Google, so there is no password to leak. No system is perfectly secure; if a breach ever puts your information at real risk, we will tell you and the Privacy Commissioner as the law requires.

Accounts and coaching are for people 18 and older. If you think someone younger has created an account, tell us and we will delete it.

If this policy changes, the date at the top changes. If a change affects how we use logbook data, we will email account holders before it takes effect.