Privacy policy

The short version

• Your bar journal is yours. Your ratings, notes and tasting answers never leave your account. We don't share them, sell them, or include them in any statistic, not even an anonymous one.
• We don't sell your personal information, and we don't share it for targeted advertising. The apps and this website have no advertising or analytics trackers and set no cookies.
• What does leave, leaves as counts. We may share or sell statistics about what's being poured, such as how many people ordered a drink at a bar in a month. We don't release a group small enough to point to a person.
• Location only when you allow it: at the moment you scan a card, or when you tap Near me to find bars. Scan coordinates are deleted after 90 days; a Near me search is never saved.
• You can get a copy of your data or delete your account at any time, in the app or by emailing hello@thepour.cards.
• ThePour is for people 21 and older.

1. Who we are

ThePour, LLC, a Nevada limited liability company (“ThePour,” “we,” “us”), makes cocktail trading cards sold in bars, the ThePour app, this website, and the partner portal bars use to order cards. This policy covers all of them. It does not cover a bar's own website or anything a bar does on its own premises.

Questions about this policy or your data: hello@thepour.cards.

2. What we collect

Your account

• Email address. This is how you sign in. We email you a one-time code; there is no password.
• Handle, the name you choose to show in the app.
• Phone number, only if you add one. Nothing in the app asks for it today.
• Your confirmation that you are 21 or older, and when you gave it. We don't ask for your date of birth or ID.
• When your account was created and when you last signed in.

Your bar journal

• Pours you log: the drink, the bar if you name one, when, whether it was your first time, what you paid if you enter it, and a bartender's name if you type one. A name you type is private to your journal.
• Your opinions: your rating, notes and answers to tasting questions. These are private. See section 4.
• Drinks you favorite, the drinks you tell us you like, and “chases,” the saved searches you build for cards you're hunting.
• Bars you add to your own list (found through Google's place search) and bars you follow. If a bar you add doesn't carry ThePour yet, we note that you asked for it, so we know which bars to approach. We count requests; we never tell a bar who asked, and your request is deleted with your account.

Your cards

• Scans: which card, when, and whether you were checking, claiming or disputing it. If you've allowed it, where. See section 5.
• Ownership: each card's claim and trade history, and any dispute about who owns it. This is kept against your account's internal ID, not your name or email.
• Claim attempts, including failed ones, to stop people guessing card codes.
• Virtual cards you collect by logging pours.

If you're a bartender

• Bartenders join by invitation from a partner bar they work at. The bar gives us your name and email to send the invitation, and we record which bars you work at once you accept.
• The name you choose to appear on your bartender card (first name, or first name and initial), any photo and wording you add to it, and the card made with it. ThePour staff review your card, and every change to it, before anyone else sees it. Until then only you and ThePour staff can see it.
• The points you earn when patrons log pours they credit to you.

If you're a bar or work for one

• If you ask about carrying ThePour: the bar's name, your name, email, and, if you give them, phone, city and message.
• Partner accounts: the business's legal name, and the name and email of each person who signs in to the portal.
• Signing the partner agreement: the signer's name, title and email, their drawn or typed signature, the time, the IP address and browser used, and the signed PDF, which we email to the signer and keep as the record of the agreement.
• Orders: the shipping address and phone number, the order and payment status, and shipping tracking. Card payments are handled by Stripe. We never see or store card numbers; we keep only Stripe's reference for the payment.

Collected automatically

• Server logs. When your device talks to our servers, they record the IP address, device and browser type, the address requested, and the time. We use these to run the service, keep it secure and fix problems. Logs that record our email sending also contain the recipient's address.
• Website performance. This website measures how quickly its pages load. What we keep is the measurement, the page, and whether the device was a phone or a computer. It includes no IP address, identifier or cookie.
• Email delivery. If an email we send you bounces or is marked as spam, our email provider tells us, and we keep that record.

We don't use advertising, analytics or crash-reporting SDKs in the app, and we don't put tracking scripts or cookies on our websites. The partner portal and the staff tools keep your sign-in in your browser's local storage; the app keeps it in your phone's secure storage.

3. How we use it

• To run ThePour: sign you in, keep your journal and collection, suggest drinks from the cards you own, and show you bars, specials and events.
• To prove a card is genuine, record who owns it, handle trades and disputes, and stop fraud such as guessing claim codes.
• To run the bartender program, including crediting points.
• To work with partner bars: answer enquiries, take and ship orders, and take payment.
• To send the emails the service needs. Today those are sign-in codes and links only. We won't send you marketing email unless you choose to receive it.
• To understand how ThePour is used, as the aggregate statistics described in section 6.
• To keep the service secure, and to meet legal obligations.

4. Your ratings and notes stay yours

Your ratings, notes and tasting answers are visible only to you. There is no feature that shows them to another user, a bar, a bartender or a brand, and they are never included in statistics, aggregate or otherwise. Our database enforces this: each account can read only its own journal entries, and the part of our systems that produces statistics has no access to them at all.

5. Location

The app uses location in two ways, and only when you ask it to. It never tracks you in the background.

• Where you scan a card. Only if you choose to let it record this. If you allow it, the app sends your position once, at the moment you scan a card, while the app is open. Scans that claim or dispute a card don't include location.
• Bars near you. When you tap Near me on the Bars tab, the app sends an approximate location, rounded to about a kilometre, so it can list bars by distance. It isn't saved with your account or anywhere else.

We delete the coordinates 90 days after the scan. The rest of the scan record (which card, and when) is kept for as long as your account exists. You can turn location off at any time in your phone's settings.

We never record where sold packs are, or the location of the cards inside them. The only location we keep is from a scan you make, with permission.

6. Statistics we share

We turn pours and card activity into statistics: counts of what's being ordered, where and when. We may share or sell these statistics to drink brands and bars. They contain no names, emails, handles or account IDs, and we don't release any figure for a group so small it could point to a person. We never give anyone information that would let them identify or contact you.

We keep these statistics in de-identified form. We don't try to re-identify anyone from them, and we require anyone who receives them to agree not to try either.

7. Who can see what, and who we share with

Other people using ThePour

• Your handle appears in the ownership history of a card you have owned. Anyone signed in who holds that card's code can see it. If you delete your account, the history shows “anonymous” instead.
• A registered bartender's card name is visible to anyone signed in, and patrons can find it by searching when they credit a pour.
• A bar that invites you sees the name and email it invited, whether you accepted, and the name on your card. It doesn't see your points, your journal or anything else in your account.
• A bartender you credit sees the drink, the bar and the time of the pour. They don't see who you are.
• Bars see no information about you as an individual.

Companies that work for us

We use these providers to run ThePour. Each receives only what its job needs and may use it only to provide its service to us.

When the law requires it, or the business changes hands

We'll disclose information if the law requires it, or to protect people, our users or ThePour from harm or fraud. If ThePour is sold or merged, your information would go with it, still under this policy.

We don't sell your personal information and we don't share it for cross-context behavioral advertising. We haven't done either in the last 12 months.

8. How long we keep it

9. Your choices and rights

Wherever you live, you can:

• Get a copy of the personal information we hold about you, in a portable format.
• Correct it. You can change your handle in the app; for anything else, ask us.
• Delete your account and your data.
• Turn off location at any time in your phone's settings.

In the app: open My Cards, tap the account icon, and choose Download my data or Delete account. Deletion happens straight away.

Without the app, or for any other request, email hello@thepour.cards from the address on your account, with “Privacy request” in the subject. To protect you, we confirm the request came from you, usually by sending a code to that address. We respond within 45 days. If we need longer, we'll tell you why, up to the time the law allows.

We confirm we've received a request to delete, correct or know within 10 business days, and tell you how we'll handle it.

On the website, without the app: thepour.cards/delete-account signs you in with a code sent to your email and deletes your account.

What deleting your account removes: your email, handle and phone number; your journal, including every pour, rating and note; your favorites, chases, bars, follows, scans and their locations, and virtual cards; any bartender registration and points, the bars you work at, and invitations sent to your email; and your sign-in records. It happens all at once.

What stays, and why:

• A card's ownership history is a record about the physical card, and a card's history must stay complete to prove who owns it. Your past ownership stays against an internal ID that no longer connects to you, and it shows as “anonymous.”
• If you registered as a bartender, the card made with your name still exists, because a card, once made, may already be in other people's collections. It is no longer connected to your account and no longer appears in bartender search.
• Points you earned a bartender by crediting them with a pour stay with that bartender. They were theirs.
• Copies in backups and logs expire on the schedule above: backups within 7 days, logs within 30. Our internal statistics copy is rebuilt every night, so it reflects the deletion within a day.

US state privacy rights. Residents of California and of other states with consumer privacy laws (including Colorado, Connecticut, Virginia, Utah, Texas and Oregon) have the rights above, plus the right to know the categories of information we collect, where it comes from, why, and who receives it. This policy sets all of that out. You also have the right to opt out of the sale of personal information, of its sharing for targeted advertising, and of profiling that has legal or similarly significant effects. We do none of these. You may use an authorized agent; we'll ask the agent for your signed permission and confirm your identity with you. If we refuse a request, you can appeal by replying to our answer, and we'll respond within the time the law allows. If you're not satisfied with the appeal, you can contact your state attorney general. We won't treat you differently for using any of these rights. We don't collect sensitive personal information to infer anything about you. Precise location is the only sensitive information we collect, and only with your permission, to record where you scanned a card. We use it only to provide that feature and to keep the service secure, which are the uses the law allows without an extra opt-out, so there is no separate “limit the use of my sensitive information” link.

Do Not Track and Global Privacy Control. We don't track you across other websites or apps, and we don't sell or share personal information, so there's nothing for these signals to switch off. If your browser sends a Global Privacy Control signal, we treat it as a request to opt out of sale and sharing, and we would honour it if we ever did either.

California “Shine the Light.” We don't disclose personal information to third parties for their own direct marketing.

Notice of financial incentive

Two parts of ThePour give you something in return for information, and California law calls those financial incentives:

• Virtual cards. When you log a pour at a bar, or credit a bartender, you may collect that bar's or bartender's virtual card. It uses the pour you log: the drink, the bar, the bartender you credit and when.
• Bartender points. A registered bartender earns points when patrons credit them with pours. It uses the name you register with, the card made with it, and the pours credited to you.

You opt in by logging a pour or by accepting a bar's invitation to be a bartender, and you can stop at any time by not logging, or by deleting your account. Neither has a cash value today, and points can't yet be redeemed for anything. We estimate the value of the data involved by what it costs us to provide the incentive; for a virtual card or a point that cost is nominal, so our good-faith estimate of the value is under one cent per pour. If points become redeemable, we'll update this notice before they do.

10. Age

ThePour is only for people 21 or older. We don't knowingly collect information from anyone under 21. You must confirm your age to create an account, and we won't create one without that confirmation. If we learn an account belongs to someone under 21, we'll delete it. To tell us, write to hello@thepour.cards.

11. Security

Everything travels over encrypted connections. Our databases are on a private network with no public address. Sign-in codes and session tokens are stored only in scrambled (hashed) form. There are no passwords to steal. Only a small number of people at ThePour can reach personal data, and only to do their jobs. No system is perfectly secure; if a breach affects your information, we'll tell you as the law requires.

12. Where your data is

ThePour is offered in the United States, and your information is stored and processed in the United States.

13. Changes to this policy

When we change this policy, we'll update the date at the top. If a change materially affects how we use information we already hold, we'll tell you in the app or by email before it takes effect.

14. Contact

ThePour, LLC · hello@thepour.cards

Our terms of service govern your use of ThePour.