Spirit Aging Lab.

Privacy Policy

Effective date: [EFFECTIVE DATE]

This Privacy Policy explains what information [LEGAL ENTITY NAME] ("Spirit Aging Lab," "we," "us," or "our") collects when you use this website and its tools (the “Service”), how we use it, and the choices you have. By using the Service you agree to this Policy and to our Terms of Service.

1. A quick note on how the site stores your work

The Service can run in two modes. In local mode (the default when no account backend is configured), your batches, tasting notes, and photos are stored only in your own browser (via local/IndexedDB storage) and are not transmitted to us. In cloud mode (when you create an account to sync across devices), that same data is stored on our behalf by our hosting provider so it’s available when you sign in. This Policy covers both, and calls out which applies where relevant.

2. Information you provide to us

  • Account information (cloud mode): your email address and a password, handled by our authentication provider. We do not see your plaintext password.
  • Batch data: the batches you create — spirit, proof, volume, wood specs, dates, schedules and completion state, tasting notes, and outcomes.
  • Photos you upload to a batch, along with their captions and timestamps.
  • Waitlist / newsletter: if you submit your email to join the kit waitlist, we use it to contact you about launches and updates.
  • Communications: if you email us, we receive your message and contact details.

3. Information collected automatically

When you visit the site, our hosting and infrastructure providers may automatically process limited technical data such as your IP address, browser type, device information, and pages requested, in server logs used to operate and secure the Service. We use browser local storage to make the app work (for example, to save your batches in local mode, or your session in cloud mode). We do not currently serve third-party advertising. [If you add analytics — e.g. a privacy-friendly tool like Plausible, or Google Analytics — disclose it here, including what it collects and how to opt out.]

4. How we use information

We use information to: provide and operate the Service (store and display your batches, generate schedules, sync your account); communicate with you (waitlist, service messages, replies); maintain security and prevent abuse; understand and improve the Service; and comply with legal obligations. We do not sell your personal information.

5. How we share information

  • Service providers (processors) who host and run the Service on our behalf — for cloud mode this includes our backend/auth/storage provider [Supabase, Inc.], and [your email provider] for the waitlist/newsletter. They process data only to provide their service to us.
  • Affiliate & third-party links. The Service links to third-party retailers (such as Amazon and specialty vendors). When you click those links you leave our site; those companies have their own privacy policies and may set their own cookies to attribute a purchase. We do not control and are not responsible for their practices.
  • Legal & safety. We may disclose information if required by law or to protect our rights, users, or the public.
  • Business transfers. If the Service is involved in a merger, acquisition, or sale of assets, information may be transferred as part of that transaction.

6. Cookies & local storage

We use cookies and browser storage that are necessary for the Service to function (for example, to keep you signed in, or to store your batches locally). We do not currently use advertising or cross-site tracking cookies. You can control cookies and clear local storage through your browser settings, but doing so may log you out or remove locally-saved batches.

7. Data retention

We keep your account and batch data for as long as your account is active or as needed to provide the Service. In local mode, data persists in your browser until you delete it or clear your browser storage. You can delete individual batches (and their photos) in the app at any time, and you can request deletion of your account and associated data (see “Your rights”). We may retain limited records as required by law.

8. Your rights & choices

Depending on where you live, you may have rights to access, correct, delete, or receive a copy of your personal information, and to object to or restrict certain processing (for example under the GDPR or California’s CCPA/CPRA). You can:
  • edit or delete your batches, notes, and photos directly in the app;
  • unsubscribe from waitlist/newsletter emails using the link in any such email;
  • request access to or deletion of your account data by contacting us at [[email protected]]. We will verify and respond as required by applicable law, and we will not discriminate against you for exercising these rights.

9. Age restriction

The Service is intended for adults of legal drinking age (at least 21 in the United States) and is not directed to children. We do not knowingly collect personal information from anyone under 13 (or the minimum age in your jurisdiction). If you believe a child has provided us information, contact us and we will delete it.

10. International users

We are based in [COUNTRY], and our providers may process and store information in the United States or other countries. If you use the Service from outside those countries, you understand your information may be transferred to and processed there, where data-protection laws may differ from your own. Where required, we rely on appropriate safeguards for such transfers.

11. Security

We and our providers use reasonable technical and organizational measures to protect information (including access controls and encryption in transit). However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security. Keep your account credentials confidential.

12. Changes to this Policy

We may update this Policy from time to time. Changes take effect when posted with a new effective date, and significant changes may be highlighted. Your continued use after changes constitutes acceptance.

13. Contact us

Questions or requests about this Policy or your data: [[email protected]].

This document is a template and does not constitute legal advice. Have a licensed attorney review it, confirm it matches your final data stack and providers, and complete the bracketed placeholders.