Who is responsible for your data
Booze Explorer is operated by Maksymilian Kalisz in Poland. For privacy questions or requests, contact mk.ships.it.dev@gmail.com.
Data we process
- Account information: email address, display name, email verification status, account status, and account creation and login dates.
- Authentication information: a password hash when you use email and password, or identifiers supplied by Apple or Google when you use social sign-in. We do not receive your Apple or Google password.
- App data you choose to synchronize: favorites, collections, ratings, recently viewed drinks, Tonight’s Menu, language, appearance, measurement units, accessibility preferences, and dietary restrictions.
- Community data: posts, ratings attached to posts, reports, blocked-user relationships, and moderation records.
- Security data: device name, user-agent information, session timestamps, and a keyed one-way hash of the IP address used to create a session.
- Support communications: the information you include when you email us.
How we obtain data
Most data comes directly from you when you create an account, change settings, synchronize app content, post in Community, or contact support. Apple and Google provide limited identity information when you choose their sign-in services. Technical security data is generated when the app communicates with our service.
Why we use data
Where the GDPR applies, these activities rely on performance of our agreement with you, our legitimate interests in operating and protecting the service, your consent where requested, and compliance with legal obligations.
- To create and operate your account and synchronize your app data.
- To authenticate you, verify email addresses, reset passwords, and protect sessions.
- To display and moderate Community content, respond to reports, and prevent abuse.
- To answer support requests and maintain the reliability and security of the service.
- To meet legal obligations and establish or defend legal claims when necessary.
Service providers and transfers
We use carefully selected providers to operate Booze Explorer: Railway for API and database hosting, Resend for transactional email, Apple and Google for optional sign-in, and Cloudflare for the public website and domain services. These providers process data under their own terms and privacy commitments only as needed to provide their services.
Some providers or their infrastructure may process data outside Poland or the European Economic Area. Where required, transfers rely on recognized safeguards such as adequacy decisions or standard contractual clauses.
Retention and deletion
Account and synchronized app data is kept while your account is active. Session and verification records are retained only while needed for authentication, security, and abuse prevention. Community moderation and security records may be retained for a limited period when necessary to protect users or comply with law.
Deleting your account in the app permanently removes the account and related synchronized data, including Community posts, through the service’s deletion process. Information that must be kept by law or is no longer reasonably linkable to you may be retained.
Security
We use encrypted network connections, Argon2id password hashing, hashed session and verification tokens, access controls, rate limits, and session revocation. No online service can guarantee absolute security, but we limit data and use safeguards appropriate to its sensitivity.
Your choices and rights
- Review and update your display name and settings in the app.
- Delete your account and synchronized data from Profile settings.
- Unlink or manage Apple and Google authorization through the relevant provider.
- Ask for access, correction, deletion, restriction, portability, or object to certain processing where applicable.
- Withdraw consent where processing is based on consent, without affecting earlier lawful processing.
- Submit a complaint to the Polish data protection authority (UODO) or your local supervisory authority.
Children and alcohol-related content
Booze Explorer is intended only for people who are legally permitted to access alcohol-related content in their location. We do not knowingly collect personal data from children.
Website and policy changes
This public website does not use advertising or analytics cookies. Hosting providers may process standard request metadata for delivery and security. We may update this policy when the app or legal requirements change. The date above identifies the latest version.