Standfast Commerce

Hosting policy

Three lists: what we host, what we host only with controls switched on and checked before go-live, and what we refuse. We say this before you send us anything, because the coalition that moved Shopify has written that it intends to move on to web hosts next, and one wrong store would put every store on the platform at risk.

What we host

  • Glass and smoke-shop goods: pipes, rigs, bongs, grinders, rolling papers, trays, storage, apparel.
  • Dry-herb vaporizers and their parts. Under the USPS rule that implements the federal mail ban, a device used only with dry herb, and its parts, sits outside the definition of an electronic nicotine delivery system. We classify per product, not per store.
  • Cigars. The USPS mailing restrictions on tobacco cover cigarettes, smokeless tobacco and vaping products, and USPS's own definition of a cigarette excludes cigars, so cigars still go in the mail. For a cigar store the processor and the gateway fee are the problem, not the host. Whether any registration or reporting duty reaches your cigar line is a question for your counsel; we do not handle PACT Act filings (see the next list).
  • Leaf kratom, in states where it is legal, with no 7-hydroxymitragynine concentrates.
  • CBD and hemp products that meet the federal definition on the day they ship. See the Square and CBD page for the dates.
  • Other legal goods a smoke shop carries. If you are not sure, ask; the dry run gives you a row-by-row answer.

What we host only with controls on

These items are legal to sell in most places but sit inside a shipping or age rule that has to be enforced by the store, not by a policy page. We host them only when the control exists on the platform, is switched on for your store, and has been checked before go-live. Today most of these controls are still being built, with 420.com as their first customer, so an item in this list may be refused for now rather than accepted. We tell you which before you sign.

  • Any device that can be used with a liquid, including e-rigs and dab pens, and 510-thread batteries. USPS treats these as electronic nicotine delivery systems whatever they are sold for; UPS and FedEx refuse all vaping products. They cannot ship USPS, UPS or FedEx to consumers, and the platform does not yet have a carrier that will take them.
  • Hemp products near the federal 0.4 mg total-THC-per-container line, which need a per-product THC field, a certificate of analysis and date-driven withdrawal.
  • Anything that needs an ID check before payment rather than after the order. The check runs after the order today.

Not built today, so not sold: adult signature by product class, a vape-accepting carrier, and the registration tracking and monthly state reports that the PACT Act asks of a delivery seller. We do not handle PACT Act filings for any store. If your catalogue needs any of those to ship lawfully, we cannot host it yet, and we will say so rather than take the store.

What we refuse

  • Nicotine e-liquid, nicotine disposables and nicotine pouches, today. Not because they are unlawful to sell where authorised, but because the shipping, registration and reporting stack they need does not exist on the platform yet, and no store on the platform runs them, 420.com included. We will revisit this only after that stack has run on a live store for 60 days.
  • Any domain named in the attorneys-general letters to Shopify or in an FDA warning letter. We check the lists before we host a store and again every 90 days.
  • THCA, Delta-8, THC-P and HHC products after their federal dates: synthetic cannabinoids from 12 November 2026, natural cannabinoids above 0.4 mg of total THC a container from 11 December 2026.
  • 7-hydroxymitragynine concentrates, peptides, tianeptine.
  • Firearms and ammunition. Adult content.
  • Licensed cannabis dispensaries. They need point of sale and Metrc, which we do not build.
  • Anyone whose products need PACT Act registration or reporting, adult-signature delivery or a vape-accepting carrier today. We do not handle those filings.
  • Stores outside the United States, for now.
  • Stores over about 500,000 visits a month or 2,000 products, until one store that size has run 60 days on the platform.

How we screen

Two layers, run before a store is provisioned, again every 90 days, and on every catalogue import. Nothing is provisioned for a store that fails.

If a licence lapses or a class rule changes, the store goes read-only rather than offline, with 30 days of admin access and export.

Notice of changes

We give 90 days' written notice before any change to this policy that touches a product you already sell, unless the law itself changes on a shorter timetable. On any termination, you get 30 days of read-only admin plus export, and prepaid fees are refunded pro rata. Those terms are in the subscription agreement, not only on this page.

Sources

This page describes our own screening and hosting rules. It is not legal advice about your products; that is between you and your counsel.