Privacy Policy

Last updated: March 11, 2026

At Brewlis, we take your privacy seriously. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website.

1. Information We Collect

1.1 Automatically Collected Information

When you visit our website, we automatically collect certain information about your device through Google Analytics, including:

  • Browser type and version
  • Operating system
  • IP address (anonymized)
  • Pages viewed and time spent on pages
  • Referral source
  • Device information (screen size, device type)

1.2 Information You Provide

We may collect information that you voluntarily provide to us, including:

  • Contact Form: Name, email address, and message content when you contact us
  • Newsletter Subscriptions: Email address when you subscribe to our newsletter
  • Admin Login: Google OAuth email address for authorized administrators

1.3 Cookies and Tracking Technologies

We use cookies and similar tracking technologies to track activity on our website and store certain information. See our Cookie Policy for more details.

2. How We Use Your Information

We use the information we collect to:

  • Improve User Experience: Analyze website usage patterns to enhance our content and features
  • Respond to Inquiries: Answer questions and provide support through our contact form
  • Send Newsletter Updates: Provide brewing tips, recipes, and updates to subscribers (with consent)
  • Website Analytics: Monitor website performance and visitor behavior
  • Security: Protect against unauthorized access to admin areas

3. Legal Basis for Processing (GDPR)

If you are from the European Economic Area (EEA), our legal basis for collecting and using your information depends on the data and context:

  • Consent: Analytics cookies, newsletter subscriptions
  • Legitimate Interests: Improving our website, responding to inquiries
  • Contractual Necessity: Admin authentication for authorized users

4. Third-Party Services

We use the following third-party services that may collect information:

4.1 Google Analytics

We use Google Analytics to understand how visitors interact with our website. Google Analytics uses cookies to collect anonymous usage data. You can opt out of Google Analytics by installing the Google Analytics Opt-out Browser Add-on.

4.2 Google OAuth

For admin authentication, we use Google OAuth. Only authorized email addresses can access admin features. We do not store your Google password.

4.3 Hosting Provider (Vercel)

Our website is hosted on Vercel. Server logs may include IP addresses, request times, and requested URLs. Please review Vercel's Privacy Policy for more information.

5. Data Retention

We retain your information for the following periods:

  • Contact Form Submissions: 1 year from submission date
  • Newsletter Subscriptions: Until you unsubscribe
  • Analytics Data: 26 months (Google Analytics default)
  • Admin Login Data: Duration of admin access

6. Your Rights (GDPR & CCPA)

You have the following rights regarding your personal data:

  • Right to Access: Request a copy of the data we hold about you
  • Right to Rectification: Request correction of inaccurate data
  • Right to Erasure: Request deletion of your data ("right to be forgotten")
  • Right to Restrict Processing: Limit how we use your data
  • Right to Data Portability: Receive your data in a machine-readable format
  • Right to Object: Object to certain types of processing (e.g., direct marketing)
  • Right to Withdraw Consent: Withdraw consent at any time where we rely on consent

To exercise any of these rights, please contact us at info@brewlis.com.

7. Data Security

We implement appropriate technical and organizational security measures to protect your personal information, including:

  • HTTPS encryption for all data transmission
  • Secure authentication via Google OAuth
  • Regular security updates and monitoring
  • Access controls for admin areas

However, no method of transmission over the internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

8. International Data Transfers

Our website is hosted on servers that may be located in different countries. By using our website, you consent to the transfer of your information to countries outside your country of residence, which may have different data protection laws.

9. Children's Privacy

Our website is not directed to individuals under the age of 13. We do not knowingly collect personal information from children under 13. If you become aware that a child has provided us with personal information, please contact us, and we will take steps to delete such information.

10. Do Not Track Signals

Some browsers include a "Do Not Track" (DNT) feature. Our website does not currently respond to DNT signals. You can disable cookies in your browser settings to prevent tracking.

11. California Privacy Rights (CCPA)

If you are a California resident, you have specific rights regarding your personal information:

  • Right to know what personal information is collected
  • Right to know if personal information is sold or disclosed
  • Right to say no to the sale of personal information
  • Right to delete personal information
  • Right to equal service and price

We do not sell personal information. To exercise your CCPA rights, contact us at info@brewlis.com.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated "Last updated" date. Material changes will be notified via email to newsletter subscribers or through a prominent notice on our website.

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.

13. Contact Information

If you have any questions or concerns about this Privacy Policy or our data practices, please contact us: