Privacy policy
Last updated November 5, 2026
This policy describes the current informational TOP-PUFF.COM website, operated by WiseGai.com.
On this page
Enquiries
Our wholesale form collects business type and name, your contact details, business address, number of locations, your 21+ business confirmation and permission to contact you. You may also supply your role, expected order, website, colour interests and a message. Cloudflare processes the application and emails it to the two authorised team inboxes handling admin@top-puff.com. We use it to review and answer your enquiry. We do not collect payment details, identity documents or resale permit numbers; please leave them out of the form and ordinary email. If you email us directly, we receive the information you choose to include. This website has no checkout. Our contact address is admin@top-puff.com.
Packaging QR scans
Opening the QR address on our packaging redirects to the home page. Our scan database records the printed code, time, approximate country, region and city supplied by Cloudflare, and a broad device category: iPhone, Android or Other. It does not store your IP address, full user-agent string, visitor identifier or a cookie. Counts measure visits, not unique people or verified camera scans. Known crawlers, link previews and prefetch requests are filtered on a best-effort basis.
Browser storage and administration
Your browser stores a setting after you confirm you are 21 or older. During a wholesale submission, session storage keeps an opaque reference, a salted fingerprint and its status so retries can use the same reference. It does not store your completed form. Clearing that storage may prevent a safe retry; contact us with your reference if delivery is uncertain. You can clear it through your browser settings. Signing in to the private administrator area sets a Secure, HttpOnly session cookie, limited to that area, lasting up to 12 hours. Login protection temporarily stores a keyed, window-specific digest derived from the connecting IP address and an attempt count, without storing the raw address. Attempts are limited in 15-minute windows; expired protection rows are removed on later login traffic and by daily cleanup. Ordinary site visitors do not receive an administrator cookie.
Application delivery protection
The application database stores an opaque reference, a keyed fingerprint, two delivery-status records and expiry times, without the submitted contact or business details. Abuse protection uses a keyed, window-specific digest derived from the connecting IP address, not the raw address. Applications are sent only to our fixed team inboxes; the applicant address is used for replies, not automated email delivery.
Hosting and outside links
Cloudflare hosts and protects this site and processes network information, including IP addresses, to deliver its services. Its own operational records are separate from our scan database. The current release has no map, advertising pixels or third-party advertising cookies. Opening an outside link or sending email uses the relevant provider, whose privacy practices also apply.
Retention
Scan records are deleted by an automatic daily cleanup once they are more than 90 days old; the daily schedule can add up to 24 hours before physical deletion. Expired login-protection rows are deleted by daily cleanup and on subsequent login traffic. Application references, fingerprints and delivery status expire after seven days; rate-protection records expire after their 15-minute window. Daily cleanup ordinarily adds up to 24 hours before these rows are physically deleted; a fresh application delivery in progress is allowed to finish before its receipt is removed. We retain enquiry correspondence only while needed to handle the enquiry and follow-up, ordinarily up to 12 months after the last contact, unless an ongoing matter or a legal obligation requires longer. Copies you ask us to export or retain for a specific matter are handled for that purpose.
Use and disclosure
We use this information to answer enquiries, understand packaging visits, operate the site and prevent abuse. We do not sell this website data or use it for targeted advertising. Hosting and email providers process information to supply their services. We may disclose information when legally required or to protect rights and security.
Choices and requests
For a privacy question or a request to access, correct or delete information, email admin@top-puff.com. We may need information to verify that a request relates to you. Anonymous scan records have no persistent visitor identifier, so we may be unable to identify a particular person's scan. Rights and required response periods depend on applicable law.
Age and changes
This website is for adults 21 and over. If you believe a minor sent us personal information, contact us so we can address it. We will update this policy before adding online purchases, maps or materially different data processing.
Operator and contact
Site operator: WiseGai.com. Contact: admin@top-puff.com. Mailing address: 5545 Sheridan Street, Hollywood, FL 33021, United States.