Privacy

Who we are.

By the Glass Stories LLC, an Illinois limited liability company, runs the app and is responsible for your data. Send privacy requests to hello@bytheglassapp.com from your account email. Get help at support@bytheglassapp.com.

Age.

This app is for people 21 and older. It is not directed to children. If we learn that someone under 21 gave us personal data, we delete it.

Accounts.

Signing in uses Supabase, our account provider. Supabase stores your email address as your account identifier and emails you one-time sign-in codes. It also keeps security logs of sign-ins, including the time, your IP address, and your browser. If we invite you, your email address is also on our invitation list. Your account and invitation stay until you delete your account; Supabase keeps its security logs under its own retention rules.

Local by default.

Your taste quiz, recommendations, pairings, home bar, journal, and everyday drink requests work on this device by default. Features that use a server are separate and yours to choose. Quiz answers and taste profile, saved drinks, journal entries, home bar, your always-avoid (allergy) list, zero-proof settings, diet preference, city, Pair votes, and learning progress stay in this browser. Apart from the optional analytics described below, we keep no copy of this data on our servers, even when you sign in. Clearing this site's storage removes it.

Optional analytics.

Consented product analytics use a persistent pseudonymous identifier, not an anonymous identity. Each event records which action you took and a small payload about that action — including text you type into app fields, quiz answers, dish and drink names, and game scores — plus the route, timestamp, referral ID, palate archetype, proof setting, and coarse location supplied by our host, Vercel (country, region, city, and timezone). If you allow analytics, links you share carry your random ID as their referral code, so anyone holding a link you shared can read that code. We do not send your contacts or advertising identifiers. Analytics are used to improve recommendations and learning, are not sold, and are retained for no longer than 12 months. Declining — or withdrawing later — also deletes the stored events tied to your random ID.

Current analytics choice: not chosen

Hosting.

Vercel hosts the app in the United States. It carries every request, sees your IP address, supplies the coarse location fields above, and runs our abuse rate limits. Cloudflare provides our domain names, our email addresses and email delivery, and the bot check. Account data is stored by Supabase in the EU (Frankfurt); requests are processed in the United States. Our server code does not write your analytics or session identifiers to logs. Vercel also keeps its own request logs. They include the address of each page you open — a shared link's referral code is part of that address — and your IP address. Vercel keeps them under its own retention rules, and withdrawing analytics or deleting your account does not erase them.

Bot check.

When you ask for a sign-in code or request access, Cloudflare Turnstile checks that a person is using the page. It processes your IP address and browser signals under Cloudflare's terms. We receive only a pass/fail result.

Access requests.

We store your email, your confirmation that you are 21 or older, and the Terms version and time you agreed. Our inbox gets an email with your address through Cloudflare Email Service, so that we, or a person or service that helps us, can review your request. If we approve your request, you get an email saying you can sign in. We store no social handle, no IP address, and no country. We delete a declined request within 30 days and a pending request after 12 months. An approved request becomes the record of your invitation and is deleted with your account.

Consent records.

When you sign in or accept changed Terms, we store the Terms version, how you accepted (sign-in or re-acceptance), and the time with your account. This is our record that you confirmed you are 21 or older and accepted the Terms. It is deleted with your account.

Membership record.

When your access request is approved or you first sign in, we store a membership record with your email address: your member number, your membership type, the date you joined, how you joined (approved request, invitation, or first sign-in), and, for a founding member, the date your free guarantee ends. We use it to show your membership and to keep its promises. It is deleted with your account.

Feedback you send.

The “Report a problem” button is for signed-in guests and emails our support mailbox through Cloudflare Email Service. That email carries the words you type and the kind of note you picked; if you leave “include what I was looking at” on, it also carries the page you were on, your browser and device type, and the app build; and it carries your email address only if you add one so we can reply. It never includes your taste preferences, journal, saved drinks, allergies, location, or analytics identifiers, and your report is not used for advertising or sold. It stays in our mailbox for as long as it is useful for fixing the app. If the app itself breaks while you are signed in, it also sends an automatic crash report under the same limits: the technical error message, the page, your browser and device type, and the app build — at most a few per session, and never your taste preferences, journal, saved drinks, allergies, or location.

Cloud features you choose.

Concierge messages are interpreted on your device today; if an optional AI interpretation is enabled later, it will send only the message you choose to Gemini 2.5 Flash-Lite through Cloudflare AI Gateway, plus the current proof and drink-register setting, used only to disambiguate words such as “strong.” Your taste preferences, journal, allergies, recommendation history, and drink catalog would not be sent with it, this app would not retain the message, AI Gateway prompt/response payload logging is disabled for that route, and Google would process the inference under its service terms. Weather-based suggestions call Open-Meteo directly from your browser, so that request carries your IP address and browser headers along with rounded (two-decimal) coordinates. Push reminders are retired for launch, so this app does not collect push subscriptions. Those processors handle data under their own service terms. When you deliberately use one of these server features, the app uses a separate random operational ID—or your server-verified account ID when signed in—to enforce abuse and cost limits. That identifier is not sent to Gemini, used for analytics, or placed in shared referral links. Quota records are removed 30 days after their window ends; deleting a signed-in account also removes its account-linked quota rows.

Your choices.

You can decline or withdraw analytics without losing the core app; withdrawal deletes the stored events tied to your random ID. Account controls live under Me. To request a copy or deletion of other server-held data, contact us from the account email or through the channel below. Local browser data can be removed by clearing this site's storage.

Delete your account.

Me → Delete my account removes your account, quota rows, consent records, your membership record, your invitation, and your access request; clears this device's local data; and also erases the analytics events tied to this device's random ID. Analytics events from another device you used need a withdrawal on that device (the control is on this page). If this device's erase cannot reach us, the Account page says so, and the control on this page finishes it. It does not remove emails you sent us. You can also ask by writing to hello@bytheglassapp.com from your account email.

Your rights.

Wherever you live, you can ask us for a copy of the personal data we hold about you, and you can ask us to correct it or delete it. You can do most of this yourself: Me → Download my data gives you a copy, and Me → Delete my account deletes it (see “Delete your account” above). For anything else, email hello@bytheglassapp.com from your account email so we can confirm the request is yours. We answer within 45 days. Someone you authorize may ask for you if they show us your signed permission. If we turn down a request, reply to our answer to ask us to reconsider; we answer that within 45 days too. We will not treat you differently for using these rights. We do not sell your personal data, and we do not share it for targeted advertising. We do not use it to make decisions about you that have legal or similarly significant effects.

California.

In the past 12 months we collected these categories of personal information: identifiers (your email address, your account ID, and random device IDs); internet activity (the events described under Optional analytics, and our host's request logs); coarse location (country, region, and city from our host); and the messages you send us. We collect this from you, from your device, and from our host. We use it to run the app, keep it secure, and improve it, and we keep it for the periods this notice states. We disclose it only to the service providers named in this notice, so they can run the app for us. We do not sell or share personal information, as California law defines those words, and we use sensitive personal information only to provide the features you ask for. You can use the rights under Your rights as that section describes.

Changes to this notice.

When we change this notice, we update the date below. If a change affects how we use data we already hold, we will tell you in the app or by email before the change applies.

Contact.

Reach us at hello@bytheglassapp.com or support@bytheglassapp.com, or on @by_the_glass_stories.

Effective October 5, 2026. This notice covers By the Glass Stories' web app and any mobile app we release.

Drink with intention. This product is for people 21 and older.