Privacy & storage
Plain-language data notice
Effective August 27, 2026. NOX LLC, an Oklahoma limited liability company, owns and operates Leafy Updates. This notice describes how Leafy Updates handles information and will be updated when its features or data practices materially change.
Browser storage and cookies
Leafy stores a first-party value in your browser's local storage after you confirm that you are 21 or older. We may also store basic interface preferences. This information stays in your browser until you clear site data. After you register or log in, Leafy sets an essential HTTP-only session cookie so the server can recognize your account. The cookie is unavailable to browser JavaScript, is limited to Leafy, and expires or can be revoked. Leafy does not use advertising trackers or sell behavioral data.
Reliability and optional analytics
Leafy uses Sentry as a service provider to diagnose software errors and outages. An error report may include the error message and stack trace, the Leafy route without its query string, browser or runtime details, deployment version, diagnostic breadcrumbs, and an internal account identifier when you are signed in. Leafy removes request bodies, cookies, authorization headers, query strings, and default personally identifying request data before sending an event.
If you allow optional analytics, Leafy uses PostHog to measure page visits and product interactions and to provide session replay for troubleshooting. Replay masks all form inputs and visible page text, does not record network bodies or headers, and removes query strings and fragments from recorded URLs. PostHog respects your browser's Do Not Track setting and creates an identified profile only after sign-in. Leafy does not use these services for advertising or sell their data.
Sentry and PostHog process this information for Leafy under their respective service terms and privacy practices. You can review the Sentry privacy notice and PostHog privacy notice.
Information you submit
Waitlist forms, job applications, inquiries, profile claims, and verification requests may collect contact and business information you choose to provide. Manual verification may include a private image of an OMMA employee credential. Credential images are not public profile assets and should be retained only as long as needed for review, audit, or dispute handling.
Public and enriched business records
Leafy combines public licensing records with best-effort matching and publicly available business details such as websites, hours, logos, addresses, and public contact channels. Businesses can claim profiles and control visibility for contacts they manage. Public record matches may be imperfect and should be verified with the issuing authority before a critical decision.
Contact and choices
You can change optional analytics at any time through “Privacy choices” in the site footer. Choosing “Essential only” stops PostHog analytics and replay; Sentry reliability reporting remains active. You can clear the age acknowledgement through your browser's site data controls. For access, correction, deletion, or privacy questions, contact privacy@leafyupdates.com.
Data deletion instructions
To request deletion of your Leafy account, submitted information, or stored LinkedIn or Meta connection tokens, email privacy@leafyupdates.com from the address associated with your account and identify the account or business profile involved. We may verify your identity or authority before processing the request. We will delete or de-identify eligible data and revoke stored integration tokens, except for limited records that must be retained for security, fraud prevention, disputes, or legal obligations.