Privacy Policy
Scope
This policy describes how the ColaXpress website handles information when you visit or contact us. We aim to collect as little as possible and to keep earning links, navigation, and reading fully functional even when analytics, cookies, or consent are unavailable. The sections below describe each data flow separately, stating what we know and marking what is not yet finalized.
Hosting and server access logs
The site is hosted by Hostinger. Like most web hosts, the server may keep standard access logs (for example your IP address, the page requested, timestamp, and browser user-agent) for security and reliability. These logs are handled by the hosting provider under its own terms. Server access logs are retained for up to 180 days.
Contact form
Direct messaging through the site is currently disabled while a verified contact system is built, so the contact page cannot receive messages and collects no data through a form at this time. If a contact form is enabled in the future, this section will be updated to name the form processor, describe how it stores and handles what you submit, and state how long submissions are retained — before any such form goes live.
The free ebook and email updates
If you request our free ebook (the Root Zone Bible) through the sign-up form, we collect the email address you enter and nothing else — no name is required. The sign-up form is embedded from Hostinger Reach (described below), and automated submissions are screened by Cloudflare’s bot protection; that screening is used only to block spam. This is adult content: the ebook and this list are intended for growers 21 or older, which you confirm with a required checkbox when you submit the form.
We use your email to send you the download link and occasional educational grow guidance from ColaXpress. Your email address is collected and managed by Hostinger Reach, the email service built into our Hostinger hosting, which acts as our data processor for sending and storing these messages. Depending on your location and our settings, you may first receive a confirmation email asking you to verify your address before we send anything further. We do not sell, rent, or share your email with anyone outside that delivery role.
How long we keep it, and how to leave: we keep your email until you unsubscribe or ask us to remove it — we are not required to retain it and will delete it on request. Every marketing email we send will carry an unsubscribe link, and in the meantime you can ask to be removed at any time using the privacy contact below. Downloading the ebook does not depend on staying subscribed.
Analytics
We use consent-aware, no-personally-identifiable-information analytics — Google Analytics 4 — to understand which guides are useful. Analytics is off by default: the Google Analytics tag loads only after you choose “Accept analytics” in the on-page notice. If you decline, or make no choice, no analytics tag loads and no analytics data is collected. When you accept, we record which pages you view and which affiliate calls-to-action you see or click, sending only non-identifying details about the link — its network, merchant, product slug, placement, creative version, and the destination website’s domain — never the full affiliate URL or ClickRef. We never send your name, email, form text, URL parameters that contain personal data, or any stable visitor identifier.
Google Fonts
Pages load typefaces from Google's font CDN (fonts.googleapis.com and fonts.gstatic.com). To serve those fonts, Google receives standard request metadata such as your IP address. This happens as part of loading the page's styling and is governed by Google's own privacy terms.
Embedded video
Pages that embed video use YouTube's privacy-enhanced (no-cookie) mode, which is designed to avoid setting tracking cookies until you interact with the player. If you play or otherwise interact with an embedded video, that interaction involves YouTube and is subject to YouTube's and Google's privacy terms.
Affiliate networks
Some pages include affiliate links. When an affiliate link is active and you click it, you are taken directly to the merchant — VIVOSUN through the Awin network, or Amazon when that program is enabled — and the merchant may set its own cookies to attribute a possible commission. ColaXpress does not attach any personal data to those links and does not cloak them or route you through hidden redirects. How our links are labeled and disclosed is described in our Affiliate Disclosure.
Cookies and consent
Non-essential storage — anything beyond what is strictly required to serve the page — is gated on your consent decision, and earning links keep working regardless of what you choose. On your first visit a notice offers “Accept analytics” or “Decline”; the default is no analytics until you accept. Your choice is remembered only in your own browser’s local storage — it is not sent to us or any third party — so the notice does not reappear; clearing your browser storage resets it. The site is served to visitors in the United States.
Your choices and privacy requests
You can browse ColaXpress without submitting any personal information, decline non-essential storage, and choose what, if anything, to include when you contact us. For privacy requests, email privacy@cola-xpress.com.
Who is responsible and where this applies
ColaXpress is operated by CannaHustle LLC, a New York limited liability company, which is the legal entity responsible for this site. The governing jurisdiction for privacy purposes is the State of New York, United States.
Changes and effective date
We may update this policy as our data practices are finalized; material changes will be reflected in the "last updated" date above. This policy takes effect on 16 September 2026. If you believe something here is inaccurate, please see our Corrections Policy.