Privacy Policy
Last updated: October 6, 2026 · DrinkMixr (“we”, “us”, “our”)
1. The Short Version
- We collect what we need to run DrinkMixr: your account, what you save and share, and your chats on paid plans.
- We don't sell your data and we don't show ads.
- Google Analytics, and performance data from your browser, only run if you say yes.
- The AI services that write replies and draw pictures never get your name or email address.
- You can download your data or delete your account yourself, at any time.
2. Information You Give Us
- Account: username, email address and password (stored only as a salted hash), and your confirmation that you're of legal drinking age.
- Profile (optional): first and last name, bio, profile photo, favorite spirit, experience level and preferred units. Your real name is shown to others only if you turn on “Show my real name”, and your public profile page stays hidden until you turn on “Public profile”. Profile photos are re-saved when you upload them, which strips location and camera details.
- Business accounts: business name, logo, brand color, menus and the kiosk screens you set up.
- Chats with the AI bartender: what you write and the replies. Chats are saved only on paid plans, so you can come back to them. On the free plan and as a guest they aren't kept on our servers; your browser holds the current conversation until you close the tab.
- Taste preferences (paid plans): likes, dislikes, allergies and notes you add under “My tastes” on Edit profile. When you state a preference in chat (for example “I don't like gin” or “I'm allergic to citrus”), we save it there too and use it to tailor suggestions. This is a form of profiling. It's only used to personalize your drinks, never for ads. You can see and remove every saved taste under “My tastes”.
- Drinks: drinks you save or create, drinks you publish to the community, and share links you make. Anyone who has a share link can open it.
- Community: reviews, ratings, comments and votes, plus the XP, levels, streaks and badges they earn. Published drinks, reviews and comments show your username.
- Generated images: drink pictures you ask us to make, and the drink description used to make them.
- Payments: handled by Stripe. We never see or store your full card number. We keep your Stripe customer ID, plan, subscription status and dates, and a card fingerprint from Stripe (not the number) so each card gets one free trial.
- Contact form: your name, email address, topic and message, which are emailed to our inbox.
- Issue reports: what you write and an optional screenshot. We also capture the page address, your browser and screen size, your plan, your last action on the page, the time, and who sent it (your account, or the hashed guest key below), so we can reproduce the problem.
- Beta feedback: your ratings and comments, and your name if you give it.
3. Information We Collect Automatically
- Server logs: your IP address, browser (user agent), the pages you request and when. Our servers and network provider keep these to run and protect the site.
- Rate limiting: we count requests per IP address in short-lived counters that expire on their own, to stop abuse.
- Guest limits: if you aren't signed in, your browser stores a random identifier in local storage (
mixr_guest_id). We combine it with a salted hash of your IP address (not the address itself) to count free guest chats. - Product events: our own first-party statistics, kept on our servers: pages viewed (and the page you came from), searches including the words you searched for, drinks viewed, saves, shares, publishing, image requests, sign-up steps and when you hit a limit. They're linked to your account, or to the hashed guest key if you're not signed in. They show us what works; they aren't shared with anyone.
- Usage counts: how much of your plan's daily allowance you've used.
- Error reports: when something breaks, details of the error go to Sentry (see section 6).
4. Cookies and Local Storage
These are needed to run the site and are always on:
| Name | What it's for | How long |
|---|---|---|
session | Keeps you signed in, and holds the security token that protects forms (CSRF). | 24 hours after your last visit, or until you log out |
known_device | Remembers that this browser has signed in to your account before, so login protection doesn't lock you out. Sent only to sign-in pages. | About 6 months |
beta_tester | Remembers your invite during the private beta. | 30 days |
unit_pref | Your choice of ounces, centiliters or both. | 1 year |
dmx_consent | Remembers whether you accepted or rejected analytics. | 1 year |
Your browser's local and session storage also keep your theme, units, the guest identifier above, which chat you had open, the current conversation, and your last action on the page (for issue reports). Business kiosk screens keep a copy of their menu so they work offline.
Analytics, only with your consent: if you press “Accept analytics”, we load Google Analytics, which sets the _ga and _ga_… cookies (up to 2 years) and sends Google details of your visit. If you reject it or don't choose, Google Analytics never loads. You can change your mind at any time with “Cookie settings” at the bottom of any page; rejecting removes those cookies.
5. How We Use Information, and Why
- To provide the service you signed up for (contract): your account, chats, recipes and images, saved and shared drinks, community features, payments and the emails the service needs (verifying your address, password resets, receipts).
- For our legitimate interests: keeping the site secure and working (server logs, rate limiting, error reports, guest limits, one free trial per card) and improving it with our own product events. We weigh these against your interests, and you can object (section 8).
- With your consent: Google Analytics, performance data from your browser, marketing emails, and showing your real name or public profile. You can withdraw consent at any time.
- When the law requires it: for example, keeping tax records of payments.
6. Who We Share It With
We don't sell your personal data or share it for advertising. We share it only with the service providers below, to run DrinkMixr, and when the law requires it. Some of them process data in the United States and other countries.
- Stripe (payments): your email address, plan and payment details.
- Resend (email delivery): your email address and the emails we send you.
- Sentry (error monitoring): error reports from our servers and your browser, with secret tokens removed from page addresses, plus samples of server response times. Performance data from your browser is sent only if you accept analytics.
- Cloudflare (network and DNS): every request passes through Cloudflare, including your IP address.
- OpenRouter and DeepInfra (AI chat): your chat messages, the page you're on, and your profile basics (favorite spirit, experience level, preferred units and a short excerpt of your bio), plus your saved taste preferences on paid plans. Never your name or email address.
- Google (Gemini) and fal.ai (drink pictures): the description of the drink to draw. Some pictures are made on our own image server instead.
- Google Analytics: only if you accept analytics (section 4).
7. How Long We Keep It
| Data | Kept for |
|---|---|
| Your account, profile, saved drinks, community activity and paid-plan chats | Until you delete them or your account |
| Chats on the free plan | Not kept. Any free-plan chat still stored (for example from before you moved to the free plan) is deleted within 30 days. |
| Product events and usage counts | 400 days |
| Issue reports and their screenshots | 90 days after the report is closed, and never more than 365 days |
| Beta feedback | 365 days |
| Share links for drinks you made private | Deleted 30 days after you make the drink private |
| Staff audit log (role changes, moderation, data exports, two-factor changes) | 730 days (2 years); entries about a deleted account no longer name it |
| Backups | 14 days |
| Server logs | As long as our hosting keeps them before rotating them out |
When you delete your account, we delete your profile, chats, taste preferences, saved drinks, reviews, comments and votes, share links, issue reports (with screenshots), beta feedback, product events and usage counts, withdraw the drinks you published, and cancel your subscription. Stripe keeps invoices because tax law requires it. Copies in backups expire within 14 days. Drink pictures we generated aren't linked to you once your account is gone.
8. Your Rights and Choices
Depending on where you live, including under the GDPR (EU and UK) and the CCPA (California), you have the right to:
- Access and take your data: use “Download my data” on your profile page to get everything your account holds as a file.
- Correct it: edit your profile, or ask us.
- Delete it: delete your account yourself under Edit profile. You can also remove single items, such as saved drinks, chats on paid plans and tastes.
- Object or restrict: ask us to stop using your data for our legitimate interests.
- Withdraw consent: use “Cookie settings” for analytics, the unsubscribe link for marketing emails, and your profile settings for your public profile and real name.
- Complain: contact your local data protection authority. We'd appreciate the chance to fix things first.
For anything you can't do in the app, email [email protected]. We won't treat you differently for using these rights.
9. Emails
We send the emails the service needs: verifying your address, password resets, receipts, trial and renewal reminders, and important account notices. Marketing emails, such as new cocktails, updates and offers, go out only if you opt in on your profile, and every one has a one-click unsubscribe link.
10. Age Requirement
DrinkMixr is only for people of legal drinking age: 21 or older in the US, or the legal drinking age where you live if that's higher. You confirm this when you sign up. We don't knowingly collect data from anyone younger; if we learn we have, we delete the account.
11. Security
We use HTTPS, store passwords only as salted hashes, sign and protect session cookies, limit login attempts, and require two-factor sign-in for staff accounts. Our pages load their code and fonts from our own servers, not from third-party hosts; Google Analytics, if you accept it, is the only exception. No system is perfectly secure, so please use a strong password you don't use anywhere else.
12. Changes to This Policy
When we change this policy, we update the date at the top. If a change matters, we'll tell you by email or with a notice on the site before it takes effect.
13. Contact
For privacy questions, contact us at [email protected] or through our contact form.