so it's set BEFORE the // app-embed klaviyo.js (injected via content_for_header) reads it. // Klaviyo checks the __kla_off cookie on load; "true" disables tracking. // - Returning visitor who declined marketing -> set __kla_off=true. // - Returning visitor who accepted -> clear it. // - First visit (no saved choice): US opt-out default is "granted", so // we leave Klaviyo enabled and let the banner set the switch once the // visitor chooses. If your model is opt-IN, set __kla_off=true here. if (saved && !saved.marketing) { document.cookie = "__kla_off=true; path=/; max-age=31536000; SameSite=Lax"; } else if (saved && saved.marketing) { document.cookie = "__kla_off=; expires=Thu, 01 Jan 1970 00:00:00 GMT; path=/"; } } catch (e) {} })(); CBD Age Requirements: How Old Do You Have To be To Buy CBD? - FABCBD Skip to content
Unlock UNBEATABLE Member Prices — Details
Free Shipping On Qualifying Orders

CBD Age Requirements: How Old Do You Have To be To Buy CBD?

You need to be 18 or older in most states to buy hemp-derived CBD oil, and 21 or older in a handful of states and for any product containing delta-9 THC. On fabcbd.net, the requirement is 21 or older for every product, CBD included, at the door and at checkout.

Federal Law: What the 2018 Farm Bill Says

The 2018 Farm Bill legalized hemp-derived CBD at the federal level. It set no age minimum for buying CBD. The bill only requires that hemp products contain less than 0.3% THC by dry weight. Because federal law stays silent on age, states and retailers set their own rules. Most states use 18 as the minimum age for CBD, in line with the general age of adulthood. FABCBD sets its own minimum higher, at 21, across the whole site.

CBD Products vs. Delta 9 Products: Different Age Rules

Hemp-derived CBD and delta-9 THC products follow different minimum ages in most of the country. CBD-only products, under the 0.3% federal THC limit, are generally sold to adults 18 and older. Delta 9 THC products, including FABCBD's Delta 9 Gummies, follow the stricter 21-and-older rule that applies to intoxicating cannabinoids.

FABCBD applies that same 21-and-older standard to every product on the site, so there's one age requirement whether you're ordering CBD Oil or Delta 9 Gummies. Read more on hemp-derived delta 9 legality before you order.

State Age Requirements: Key Variations

A young man smiling and holding a CBD gummy between his teeth

The minimum age for CBD depends on where you live, not just what you're buying. Most states set the bar at 18 for hemp-derived CBD. A smaller group of states requires 21, and a few have recently tightened their rules for hemp products specifically. State CBD laws change often, so treat the table below as a starting point and confirm your state's current rule before ordering.

Category

Minimum age

Notes

Hemp CBD (most states)

18

Federal law sets no minimum; this is the common state default

Delta 9 THC products

21

Standard across the industry for intoxicating cannabinoids

Alaska, Illinois, Indiana, Maine, Rhode Island, Tennessee

21

These states set 21 as the legal minimum for hemp-derived CBD

Texas

21

No hemp bill passed the Legislature. Governor Abbott ordered state agencies to enforce a 21+ age rule instead (September 2025). 

fabcbd.net, all products

21

Applies at the site gate and again at checkout, regardless of product type

FABCBD's Age Policy

A dropper of CBD oil next to hemp leaves and blue sky

FABCBD requires every customer to be 21 years of age or older, for every product on the site. This applies to CBD Oil, CBD Gummies, and CBD Topicals just as it does to Delta 9 Gummies. Every visitor confirms their age before entering fabcbd.net, and every order goes through an age check at checkout. This 21-and-older standard sits above the federal baseline and above most state minimums, and it doesn't change by product type. Every product also carries third-party lab report results, so age verification pairs with lab-verified quality on every order.

FAQ

Do you have to be 21 to buy CBD? 

Not everywhere, but yes on fabcbd.net. Federal law sets no minimum, and many states allow 18, but FABCBD requires 21 or older on every product, so no one can buy CBD under 21 on this site.

Can minors buy CBD? 

No. FABCBD's age gate and checkout both require confirmation that you're 21 or older, and hemp-derived CBD is sold to adults only.

Do you need an ID to buy CBD online? 

FABCBD asks you to confirm your age when you enter the site and again at checkout, but this is a self-confirmation step, not a document or photo ID upload. In-store purchases may still require a physical ID, depending on the retailer.

FABCBD

Check your email

Dont worry we will help you to recover your password

Email is required

Verify OTP

Please enter the OTP you recevied in your email.

OTP is required

Enter New Password

Password is required
Confirm Password is required
Logo

Your Elite Membership is expiring soon

Renew now for $30 $15/yr

Limited Time Offer

Logo

Unlock UNBELIEVABLE Savings

Access ELITE Prices, Free Shipping & VIP perks at top
CBD & smoking accessory sites for only $30/yr

ELITE Members Get Birthday
Rewards!

Share your birthday below

Invalid date format. Please enter a valid date.

Your ELITE Membership Has Been
Added to Cart!

You can now shop at ELITE price!
Continue shopping & complete checkout to unlock
UNBELIEVABLE savings, free shipping & VIP perks!

, before GTM loads. // This pushes 'update' calls so GTM/GA4 reflect the visitor's actual choice // on this pageview and on every later change. Self-heals window.gtag in // case the head snippet hasn't been added yet, so nothing throws. function pushConsentUpdate(consent){ window.dataLayer = window.dataLayer || []; if (typeof window.gtag !== 'function') { window.gtag = function(){ window.dataLayer.push(arguments); }; } window.gtag('consent', 'update', { 'ad_storage': consent.marketing ? 'granted' : 'denied', 'ad_user_data': consent.marketing ? 'granted' : 'denied', 'ad_personalization': consent.marketing ? 'granted' : 'denied', 'analytics_storage': consent.analytics ? 'granted' : 'denied', 'functionality_storage': consent.performance ? 'granted' : 'denied', 'personalization_storage': consent.performance ? 'granted' : 'denied' }); } // --- Script gating function activateScriptsForCategory(cat){ // Manually-marked static tags (data-ccai-category written by hand — // needed for vendors hardcoded as ). if (window.CCAI && typeof window.CCAI.releaseVendorCategory === 'function') { window.CCAI.releaseVendorCategory(cat); } } function runConsent(consent){ // performance -> functional/loyalty/chat scripts if (consent.performance) activateScriptsForCategory('performance'); // analytics if (consent.analytics) activateScriptsForCategory('analytics'); // marketing if (consent.marketing) activateScriptsForCategory('marketing'); } function deleteCookie(name){ const host = location.hostname; const parts = host.split('.'); const baseDomains = []; const paths = ['/', '/checkout', '/cart', location.pathname]; // Add current path // Generate domains: "store.com", ".store.com", "www.store.com" for (let i = 0; i < parts.length; i++) { const domain = parts.slice(i).join('.'); baseDomains.push(domain); baseDomains.push('.' + domain); } baseDomains.forEach(function(domain){ paths.forEach(function(path){ // Try standard deletion document.cookie = name + '=; Max-Age=0; path=' + path + '; domain=' + domain + ';'; document.cookie = name + '=; Max-Age=0; path=' + path + '; domain=' + domain + '; Secure; SameSite=Lax'; document.cookie = name + '=; Max-Age=0; path=' + path + '; domain=' + domain + '; Secure; SameSite=None'; }); }); // Fallbacks for host-only cookies paths.forEach(function(path){ document.cookie = name + '=; Max-Age=0; path=' + path + ';'; document.cookie = name + '=; Max-Age=0; path=' + path + '; Secure; SameSite=Lax'; }); } // --- Vendor -> category map (per the Dec 2025 review, F1/R1). // This is the single source of truth other theme code should reference // when deciding what category a tag belongs to. GA4/Google Ads is already // gated via Consent Mode. The vendors below still need their actual // snippet, so pushConsentUpdate is not called here — it fires // only on explicit user action (Accept All / Necessary Only / Save). openBanner(); } } else { // Returning visitor: the snippet already re-applied their choice // to the dataLayer before GTM loaded, so no extra push needed here. applyTogglesFrom(saved); loadShopifyCustomerPrivacy(function(){ syncToShopifyAPI(saved); }); runConsent(saved); purgeCookies(saved); closeBanner(); } })();