Privacy Policy

1. Who We Are

The Hemp Museum ("we," "us," "our") is operated by Media Museum, Osek Patur no. 313795668, Eilat, Israel, which is the controller of the data described here. For any privacy question or request, contact us atmuseumhemp01@gmail.com.

2. What We Actually Collect

We've tried to only list what this site genuinely does today — not a generic template of everything a website could theoretically do.

Contact form

When you submit the contact form, your name, email address, and message are sent to us via Netlify Forms (our hosting provider's form-handling service) and delivered to our email. We use this only to respond to you.

Approximate location (homepage globe)

The rotating globe on our homepage requests an approximate location (city/country level) from a third-party service, ipapi.co, based on your IP address. This happens automatically when the page loads and is used only to greet you and place a marker on the globe in your own browser. It is never sent to us, never stored, and never shared with other visitors: the marker exists only on your screen and disappears when you close the page. We do not save it to any database, file, or analytics tool. If you would rather not have this happen, blocking ipapi.co in your browser or using an ad blocker will simply skip the greeting; the rest of the site works normally.

Membership status (local device only)

When a payment clears, we store a pass in your browser's local storage — a small file kept on your own device, not on our servers. It records which tier you bought and when it runs out, signed so it cannot be forged, and the site reads it to open the members' areas. It holds no name, no email and no card details. Clearing your browser data removes it; we keep no account you could log back into. See ourTerms of Servicefor more on the current state of membership.

Payments

Memberships and partnership packages are paid through Allpay. Your card details go straight to Allpay and are handled under its own privacy policy — we never see them and never store them. What reaches us is the outcome: which order was paid, when, and the last four digits of the card, which we use to recognise your payment and open your access.

Embedded videos

Some pages embed YouTube videos. When you play one, YouTube (Google) may set its own cookies and collect data according to its own privacy policy, independent of us.

Analytics

We use Cloudflare Web Analytics to see how many people visit the site, which pages they read and roughly where they come from. It sets no cookies, uses no browser fingerprinting and does not build a profile of you: the measurement is aggregated and cannot be traced back to an individual visitor. We do not use Google Analytics or any advertising tracker.

AI museum guide

When you open the AI guide and send it a question, your message and the language of the page are passed to the service that runs it on our behalf, and from there to the language model that writes the answer. We do not store these conversations, and we do not use them to identify you. Please do not type personal, medical or payment details into the chat — it is a museum guide, not a private channel. Everything else on the site works without it.

3. WhatsApp

The WhatsApp button on this site opens a chat with our number in your own WhatsApp app. Messages you send us that way are subject to WhatsApp's own privacy policy, not this one.

4. What We Don't Do

We don't sell your personal data. We don't share contact form submissions with sponsors or partners. Our partnership and sponsorship placements (seePartner With Us) never involve access to visitor data.

5. Your Rights

Depending on where you live, you may have rights to access, correct, or delete personal data we hold about you (which, per section 2, is mainly limited to whatever you send us via the contact form). Emailmuseumhemp01@gmail.comto make a request.

6. Changes to This Policy

If what the site does with data changes, we will update this page and the "last updated" date above.