Privacy Notice
Last updated: 20 June 2026
Who we are
Our World on Tap is operated by Joshua Cassin, sole trader, based in New Zealand. We are the data controller for personal data described in this notice.
What we collect, and why
- Account data (email, display name, login credentials) — to create and secure your account. Legal basis: performance of contract.
- Profile and palate data (your tasting preferences, palate questionnaire responses) — to generate personalised recommendations. Legal basis: performance of contract.
- Beer ratings, notes, and scans you submit — to provide the core Service. Legal basis: performance of contract.
- Usage and device data (page views, scan counts, IP address, browser type) — for security, fraud prevention, debugging, and improving the Service. Legal basis: legitimate interests.
- Support messages — to respond to you. Legal basis: legitimate interests.
- Brewery / judging event data (only if you use those features) — to provide brewery and judging tools to the relevant organisation. Legal basis: performance of contract.
Who we share data with
- Paddle — our Merchant of Record for all purchases. Paddle handles checkout, payments, billing, tax, invoicing, and refunds. Paddle's privacy practices are at paddle.com/legal/privacy.
- Infrastructure providers — Supabase (database, auth) and Cloudflare (hosting, CDN). These are subprocessors that host data on our behalf.
- AI providers — we use machine-learning services (via the Lovable AI Gateway) to power scan recognition and recommendations. Inputs to these services are minimised to what's needed for the feature to work.
- Breweries — if you opt in to share aggregated palate insights with breweries, only aggregated data is shared. Individual drinker identities are never exposed, and aggregates with fewer than 5 raters are hidden.
- Authorities — where required by law.
Retention
We keep account and rating data while your account is active. If you delete your account, we delete or anonymise your personal data within 30 days, except where we must retain records for legal, tax, or fraud-prevention reasons.
Your rights
You can access, correct, export, or delete your data at any time from your account settings, or by emailing us. You can also object to or restrict certain processing, and withdraw consent where processing relies on consent. If you're in the UK / EEA you have the right to lodge a complaint with your supervisory authority.
International transfers
Some of our subprocessors (e.g. Cloudflare, Supabase, AI providers) process data outside New Zealand and the EEA. Where required we rely on Standard Contractual Clauses or equivalent safeguards.
Security
We use appropriate technical and organisational measures including encryption in transit, access controls, and row-level security on our database. No system is perfectly secure; please use a strong, unique password.
Cookies
We use essential cookies and local storage for login sessions and preferences. We do not run third-party advertising trackers.
Contact
Privacy questions: hello@ourworldontap.app.
See also: Terms & Conditions · Refund Policy