Privacy policy

Account information. Your email address and, if you provide one, your name. If you register with an email and password, your password is stored only as a one-way bcrypt hash. We never store it in readable form.

Information from Google. If you choose “Continue with Google”, Google shares your basic profile with Brew Log: your name, email address, whether Google has verified that email address, and your profile picture. We save your name and email address to create or find your account. Brew Log never sees your Google password, and we don’t store Google access tokens or your profile picture in our database.

Brewing records. The batches you create and everything you enter in them, such as recipes, ingredients, brewer names, measurements, fermentation data, notes and tasting notes.

Security data. To limit repeated sign-in and registration attempts, we temporarily record your IP address, together with the email address entered for sign-in attempts. These records expire after 15 minutes for sign-in attempts and one hour for registrations, and are then deleted.

Brew Log uses cookies only to run the service: an encrypted session cookie that keeps you signed in (it expires after 30 days) and short-lived security cookies used during sign-in. Your browser’s local storage remembers whether you prefer imperial or metric units. We don’t use advertising or analytics cookies.

We use your information only to provide Brew Log: to create your account, sign you in, store and show your brewing records, and protect the service from abuse. We don’t sell your information, use it for advertising, or share it with anyone for their own marketing.

Brew Log requests only the basic sign-in permissions (your name, email address and profile picture) and uses them only to sign you in to your own account. Brew Log’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy. You can remove Brew Log’s access to your Google account at any time from your Google account settings.

We share information only with the service providers that run Brew Log, and only as needed to do so: Vercel, which hosts the app and may process request data such as IP addresses; Turso, which hosts the database; and Google, when you choose to sign in with Google. We may also disclose information if the law requires it.

We keep your account and brewing records for as long as your account exists. You can delete any batch from within the app at any time. To delete your account and all of its data, email efren.gomez0630@gmail.com from the address on your account and we’ll delete it.

Brew Log is served over HTTPS, passwords are stored as hashes, and sessions are encrypted. No online service can guarantee perfect security, but we work to protect your information.

Brew Log is not directed to children under 13, and we don’t knowingly collect information from them.

If this policy changes, we’ll update it on this page and change the effective date above.

Questions about this policy or your information? Email efren.gomez0630@gmail.com.