Privacy Policy
Last updated: October 2026 • Effective immediately
Your Privacy Matters: GF Pints is committed to safeguarding your personal data in full compliance with the UK Data Protection Act 2018 and the UK General Data Protection Regulation (UK GDPR). We do not sell your personal data or track your GPS location outside of venue discovery.
1. Data We Collect
Depending on how you interact with GF Pints, we collect:
- Account & Profile Information: Unique handle (@handle), public display name, and email address (collected via Google Sign-In or manual authentication).
- Community Logs & Reviews: Pint ratings, cellar safety confidence votes, tasting notes, and taplist verification reports submitted publicly by you.
- Geolocation Coordinates: When permitted, your latitude and longitude are processed locally by your browser to calculate distance to venues. GPS tracks are never stored or sold.
- Browser Local Storage: Cached logs, offline passport stamps, and UI preferences.
2. How We Use Your Data
- To provide and maintain the GF Pints craft beer and pub discovery directory.
- To compute community cellar safety confidence indicators and beer verification statuses.
- To maintain your GF Pint Passport badges and personal tasting diary.
- To prevent fraudulent cellar safety reports and combat spam.
3. Data Sharing & Third Parties
We do not sell, rent, or trade your personal information. Data is only processed with necessary infrastructure partners:
- Cloud Database & Storage: Secure cloud servers with Row Level Security (RLS) to store user profiles and pint logs.
- Mapping & Geolocation: Google Maps Platform APIs for interactive pub search and venue distance calculations.
- Google Identity Services: For secure Google OAuth user authentication.
4. Your Statutory Rights (UK GDPR)
Under UK data protection law, you have the right to access, rectify, or request permanent deletion (erasure) of your personal data and account logs at any time.
5. Data Retention & Security
We retain your profile and logged reviews while your account remains active. All communications use TLS/HTTPS encryption in transit.