Privacy policy

What we collect

• Account details: name, email address, phone number (optional), and date of birth. Date of birth is collected to meet the 21+ requirement, cannot be changed after signup, and is kept as a compliance record.
• Membership state: tier, status, renewal date, member number, and Stripe customer and subscription identifiers.
• Activity in the Club: event RSVPs, each in-store verification (time and the code shown), and each gift box redemption (month and store).
• Consents: your 21+ attestation, acceptance of these terms, your renewal consent at checkout, and your marketing email choice.
• Staff records: if you are staff, actions you take in the leadership console are logged with your email address.
• Technical data: sign-in events kept by our authentication provider, and anonymous page-view analytics that load only after you pass the age gate.

We do not collect your full card number; payments are handled entirely by Stripe. We do not use advertising trackers or pixels.

Why we use it

To confirm you are eligible, run your membership and billing, verify you at the counter, record gift box pickups so each is claimed once, tell you about events and drops, protect accounts, and meet our legal obligations. We do not sell your personal information.

Who processes it

Only providers acting on our instructions: Supabase (database and authentication hosting), Stripe (payments), Vercel (application hosting and anonymous analytics), and Resend (transactional email, once our own domain is configured). Store staff see your name, membership status, and gift box status when you present your phone. We do not share your contact details with third-party partners.

Marketing

Membership and billing emails are part of the service. Marketing email is opt-in at signup (the box is unchecked by default), can be turned off any time from your profile page, and every marketing email will carry an unsubscribe link and our mailing address. We do not send text messages.

How long we keep it

Account and membership records are kept while your membership is active and afterwards for as long as tax, accounting, and age-verification rules require. Verification and redemption logs are kept for [[PENDING_COUNSEL]]. After that they are deleted or irreversibly anonymised.

Your choices and rights

• View and correct your name, phone, and marketing choice from your profile page.
• Cancel your membership online from Dashboard → Billing.
• Request a copy of your data, or deletion, by emailing [[CONTACT_EMAIL]]. Deleting your account cancels your membership; we retain only what the state requires.
• Connecticut residents have rights under the Connecticut Data Privacy Act, including the right to appeal a decision we make about a request.

Security

Data is encrypted in transit and at rest. Member records are protected by row-level database policies so one account cannot read another's. In-store verification issues a fresh single-use code on each tap rather than a static identifier.

Contact

[[LEGAL_ENTITY_NAME]] is the controller of your information. [[MAILING_ADDRESS]]. Email [[CONTACT_EMAIL]].