Privacy Policy

Effective date: February 23, 2026

1. Introduction

Cigar Highway (“we,” “us,” or “our”) operates the website located at cigarhighway.com (the “Site”). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit the Site.

By accessing or using the Site, you agree to the terms of this Privacy Policy. If you do not agree, please do not use the Site.

2. Age Restriction

The Site is intended solely for individuals who are at least 21 years of age, in compliance with the federal Tobacco 21 law. We do not knowingly collect personal information from anyone under 21. If we learn that we have inadvertently collected data from a person under 21, we will delete it promptly.

3. Information We Collect

a. Account Information

When you sign in through a third-party OAuth provider (e.g., Google), we receive your name, email address, and profile photo. We do not receive or store your password.

b. Contact Form Submissions

If you use our contact form, we collect your name, email address, and the contents of your message.

c. Usage & Click Data

When you click an affiliate link, we log the click along with a one-way SHA-256 hash of your IP address. We do not store raw IP addresses. We also collect standard server logs (page requests, timestamps, browser type).

d. Cookies

We use a session cookie to keep you signed in (managed by Auth.js). Third-party retailer sites you visit through our affiliate links may set their own tracking cookies (e.g., Commission Junction); those cookies are governed by the respective retailer’s privacy policy.

4. How We Use Your Information

• To operate and improve the Site
• To display personalized search results and price comparisons
• To respond to your contact form inquiries
• To track affiliate link clicks for commission attribution (using hashed, non-identifiable data)
• To detect and prevent fraud or abuse

5. Affiliate Links & Commissions

Cigar Highway participates in affiliate programs, including the Commission Junction (CJ) network. When you click a link to a retailer and make a purchase, we may earn a commission at no additional cost to you. See our Affiliate Disclosure for full details.

6. How We Share Information

We do not sell your personal data. We may share information only in these limited circumstances:

• Service providers: Email delivery (Resend), hosting (Vercel), and database providers that process data on our behalf under strict confidentiality obligations.
• Legal requirements: If required by law, subpoena, or government request.
• Business transfers: In connection with a merger, acquisition, or sale of assets.

7. Data Retention

• Account data: Retained while your account is active. You may request deletion at any time.
• Click logs: Retained for up to 13 months for commission reconciliation, then deleted.
• Contact form submissions: Retained for as long as needed to respond to your inquiry.

8. Data Security

We implement reasonable technical and organizational measures to protect your data, including HTTPS encryption for all traffic, SHA-256 hashing of IP addresses, and secure environment variable management. We do not collect, process, or store any payment card information — all purchases occur directly on retailer websites.

9. Your Rights

You have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate data
• Request deletion of your data
• Opt out of non-essential cookies

California Residents (CCPA / CPRA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA), including the right to know what personal information we collect, the right to delete it, and the right to opt out of its sale. We do not sell personal information. To exercise your rights, contact us at the address below.

10. Third-Party Links

The Site contains links to third-party retailer websites. We are not responsible for the privacy practices or content of those sites. We encourage you to review their privacy policies before providing any personal information.

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the “Effective date” at the top of this page. Your continued use of the Site after changes are posted constitutes acceptance of the updated policy.

12. Contact Us

If you have questions about this Privacy Policy or wish to exercise your data rights, please contact us: