Legal
Privacy policy
Effective 16 August 2026 · Last updated 17 August 2026
Beerwright is a recipe studio for homebrewers. It is run by one person, and this page is the plain description of what it stores about you, who else touches that data, and how you get it back or get rid of it.
Short version: there is no advertising here, no analytics tracker, and no third party that gets your recipes to do its own thing with. What is collected is what an account and a sync engine need in order to work. You can export everything and delete everything yourself, from Settings, without asking.
“We” below means Beerwright and its operator. Questions, requests or complaints: hello@beerwright.com.
Operator: Christopher Main, 36 Troy St, Pittsburgh, PA 15209, United States — the data controller for the purposes of UK/EU data protection law.
1. What is collected, and why
Account details
When you create an account we store your email address, a display name, an optional profile image URL if your sign-in provider supplied one, and the dates the account was created and last changed. This is what identifies your workspace and lets us email you about it. There is no password field: sign-in is a Google account or an emailed magic link, so we never hold a password of yours to lose.
Sessions
Signing in creates a session record — a random token, its expiry, and the IP address and browser user-agent the session was created from. The token is carried in an HttpOnly cookie, so page scripts cannot read it. The IP address and user-agent are kept so that you (and we) can tell a session apart from an impostor's; they are deleted with the session.
Sign-in provider links
If you sign in with Google, we store the identifier Google gives us for your account and the tokens that sign-in issued, so that returning to the site recognises you. A magic-link sign-in stores a short-lived, single-use token against your email address until it is used or expires.
Your brewing data
Recipes, batches, inventory, water profiles, equipment, settings and your assistant conversations live in a Durable Object — a small database on Cloudflare's network that belongs to your account alone, not a shared table with other people's rows in it. We store it in order to sync it between your devices and hand it back to you on request. We do not read it to build a profile of you, and we do not sell it or share it with anyone for advertising.
Billing details
Checkout is handled by Paddle as merchant of record: Paddle collects and holds the card or wallet details and the billing address needed for tax, and we receive only what tells us what you are entitled to — a subscription identifier, the plan, its status and its renewal date, plus the receipts Paddle issues. Full card numbers never reach our systems.
Request logs
Like any site, Beerwright is reached over the network, and Cloudflare processes the technical details of each request — IP address, user-agent, URL, timestamps — to route traffic and to defend against attacks. We do not run a web analytics product, we do not build visitor profiles, and no advertising or tracking network is embedded in these pages.
2. The AI assistant
The assistant is optional; if you never open it, nothing here applies to you.
When you send it a message, the relevant context is sent to an AI model provider — Anthropic by default — so it can answer. That context is your message, the recent conversation, and the recipe or workspace details needed to make the answer about your beer rather than a generic one: ingredients, amounts, targets, water, calculated vitals. It is not sent with your name or email attached, and use is capped per month by plan tier.
Under Anthropic's commercial terms, prompts and responses sent through its API are not used to train its models. We do not use your recipes to train any model either. The conversation itself is stored in your own workspace, and deleting the conversation — or your account — removes our copy.
3. Who else processes your data
These are every third party involved in running the service. Each is a processor acting on our instructions under its own data processing terms; none of them is an advertising network.
| Provider | What it does | What it sees |
|---|---|---|
| Cloudflare | Hosting, network, databases (D1 and Durable Objects) | Everything we store, plus request metadata |
| “Sign in with Google”, if you choose it | That you signed in; your email and basic profile | |
| Resend | Sending magic links and account email | Your email address and the message we send |
| Anthropic | The AI assistant, when you use it | The message and recipe context for that request |
| Paddle | Payments and tax | Your payment and billing details, and your email |
| Sentry | Crash reporting in the studio, when it is configured | Stack traces and a scrubbed URL — no email, IP or query string |
If we add or change a subprocessor, this table changes with it and the effective date at the top moves.
What Google receives, specifically
Signing in with Google tells Google that you signed in to Beerwright. In return we receive your email address, your basic profile information (name, and a profile picture URL if you have one) and a Google account identifier. We use them for one thing: creating and authenticating your account. We do not request access to Gmail, Drive, Contacts, Calendar or any other Google service, and we do not sell or transfer that data to anyone else except as described on this page.
4. Cookies and local storage
Beerwright sets no advertising or analytics cookies, and there is no consent banner because there is nothing to consent to beyond what the site needs to function.
- Session cookie (app only, strictly necessary): carries your session token. HttpOnly and SameSite=Lax, and Secure on every real deployment. Without it you cannot stay signed in.
- Theme preference: light or dark, kept in your browser's local storage on this device. It is never sent to a server.
- Your offline copy: the app keeps your workspace in the browser so it keeps working on brew day with no signal. Signing out or deleting your account clears it on that device.
5. Why we are allowed to hold it
If UK or EU data protection law applies to you, our lawful bases are: contract — account, sync, assistant and billing data are what the service you asked for is made of; legitimate interests — keeping accounts secure, preventing abuse, and diagnosing faults; and legal obligation — tax and accounting records for purchases, which Paddle keeps as merchant of record.
6. How long it is kept
- Account and workspace data: for as long as the account exists. Delete the account and it goes.
- Sessions: until they expire or you sign out.
- Magic-link tokens: minutes. They are single-use and expire quickly.
- Billing records: kept by Paddle for as long as tax law requires it, independently of your account here.
One caveat worth stating plainly: Cloudflare's databases keep a rolling point-in-time recovery window at the platform level, so a deleted record can linger in that recovery window for a short period before it ages out. Nothing in Beerwright reads from it in normal operation; it exists so that a mistake on our side is recoverable.
7. Your rights, and the buttons that already do them
Two of these are self-serve today, and we would rather you did not have to email anybody:
- Export everything. Settings has a one-click export of your whole workspace, produced in your browser. Any single recipe also exports as BeerJSON from its own menu.
- Delete everything. Settings has a type-to-confirm account deletion. It erases your workspace, your sessions, your sign-in provider links, any pending magic-link token, your plan record and your account row, and clears the local copy on that device. It cannot be undone, so export first.
Depending on where you live you also have the right to ask for access to your data, to correct it, to restrict or object to processing, to receive it in a portable form, and to withdraw consent where we relied on it. Email hello@beerwright.com and we will answer within 30 days. If you think we have got it wrong, you can complain to your local data protection authority — in the UK, the Information Commissioner's Office.
8. Where your data is
Beerwright runs on Cloudflare's global network, and the providers listed above operate internationally, so your data may be processed outside the country you live in. Where transfers out of the UK or EEA need a safeguard, we rely on the standard contractual clauses and equivalent terms in those providers' own data processing agreements.
9. Security
Traffic is encrypted in transit. Session tokens sit in HttpOnly cookies rather than in page-readable storage. No passwords exist to be stolen. Each account's brewing data is held in its own Durable Object, so one account's data is not one query away from another's, and no API route accepts a user id from the client — the session decides whose data a request touches.
No system is perfect. If you find something that looks like a security problem, please email hello@beerwright.com before making it public, and we will get to it quickly.
10. Children
Beerwright is about brewing beer. It is not intended for children, and accounts are for people who are 18 or older (or the legal drinking age where you live, if that is higher). We do not knowingly collect data from children; if you believe a child has an account, tell us and we will delete it.
11. Changes to this policy
When this policy changes, the effective date at the top changes with it and the current version is always here. For a change that materially affects your data — a new subprocessor, a new category of data, a new purpose — we will email account holders before it takes effect, and note it in the app.
12. Contact
hello@beerwright.com. One person reads that address, and a privacy request is not a support ticket to be closed — say what you want and it gets done.