We collect the information needed to run accounts, personalize bottle searches, deliver alerts, process memberships, protect the service, and understand whether features work.
PRIVACY POLICY · VERSION 1.1
Clear data rules.
No fine-print fog.
Effective August 25, 2026. This is the current privacy policy for BourbonBeacon.com and related account services.
We do not sell personal data or use it for targeted advertising. Service providers process data only to help us operate Bourbon Beacon.
You can opt out of first-party and Google Analytics in Account Preferences and can submit access, correction, deletion, opt-out, or appeal requests from one privacy-request page.
1. Who we are and what this policy covers
The Bourbon Beacon is operated by Quick Site Design LLC, doing business as The Bourbon Beacon ("Bourbon Beacon," "we," "us," or "our"). This policy explains how we collect, use, disclose, retain, and protect personal data when you use BourbonBeacon.com, our emails, and related mobile or account services.
Bourbon Beacon is in Alpha. Features and data practices may evolve as the service changes. If a change materially affects your privacy rights, we will provide notice appropriate to the change.
2. Personal data we collect
- Account and identity data: account identifier, email address, display name, account status, sign-in session, age-attestation timestamp, onboarding progress, and records of when you accepted specific Terms of Service and Privacy Policy versions. Amazon Cognito handles passwords; Bourbon Beacon does not store your password.
- Preferences and profile data: saved areas, cities, counties, stores, bottle selections, hidden filters, community username and anonymity choice, email and analytics preferences, and mobile-notification settings.
- Membership and transaction data: plan, subscription status, trial and renewal dates, and Stripe customer or subscription identifiers. Stripe processes payment-card details; Bourbon Beacon does not store complete card numbers.
- Community and support data: feedback, tips, Store Pick submissions and images, store reports, "I Got One!" reports, names or public usernames, and moderation status. Signed-in submissions are linked to the submitting account even when displayed publicly as anonymous.
- Usage and communications data: page paths, feature actions, a random session identifier, account email when signed in, email delivery status, and email-open signals generated when an email client loads our tracking image. We do not treat opens as proof that a person read an email.
- Device, network, and security data: browser or device information, IP address, request logs, cookies, and similar data processed by our hosting, authentication, analytics, and security providers.
- Location data: when you use Stores Near Me, your browser or device may provide precise location. We use it to calculate nearby stores and do not intentionally save raw precise coordinates to your Bourbon Beacon account. Store and city choices you save are retained as preferences.
3. Where data comes from
We receive personal data directly from you, automatically from your browser or device, from authentication and payment providers when you sign in or purchase a membership, and from other users when they submit community content. Public liquor-store and inventory information comes from public or government-linked sources and is not personal data about Bourbon Beacon members.
4. How we use personal data
- Create, authenticate, administer, suspend, protect, and delete accounts.
- Personalize inventory results, saved searches, Store Picks, community attribution, and alerts.
- Process and administer memberships, trials, renewals, cancellations, and customer support.
- Send requested inventory alerts, product updates, operational notices, and privacy-request responses.
- Moderate submissions, prevent abuse and fraud, secure the service, diagnose failures, and enforce our Terms.
- Measure page use and distinct feature actions, including email delivery and estimated opens, so we can improve the Alpha service.
- Comply with law, resolve disputes, preserve evidence, and protect users, Bourbon Beacon, and others.
7. Your choices and privacy rights
Depending on where you live, you may have rights to confirm whether we process your data; access it; receive a portable copy; correct inaccuracies; delete data; obtain a list of certain third parties; opt out of sale, targeted advertising, or certain profiling; withdraw consent; and appeal a denied request. We will not discriminate against you for exercising a privacy right.
Submit a request at /privacy/request. Signed-in requests are automatically linked to the authenticated account. We may need additional information to authenticate other requests. We generally respond within 45 days and may take one additional 45-day extension when reasonably necessary, with notice. Appeals are reviewed and answered within 45 days.
You can change email delivery, community attribution, and analytics choices in Account Preferences. You may also use the privacy-request page even if you do not have an account. Authorized agents may submit requests where permitted by law, but we may require proof of authority and direct identity verification.
8. Account deletion
A signed-in member can request account deletion from the privacy-request page. We immediately disable Bourbon Beacon marketing and inventory-alert preferences and mobile push tokens while the request is reviewed. A deletion request does not automatically cancel a paid Stripe or app-store subscription; cancel billing separately from the membership portal to prevent future charges.
Before completing deletion, we verify identity and check active billing, fraud, security, dispute, and legal-retention obligations. Completion removes or deidentifies account preferences, first-party analytics, delivery records, and account links to submissions, and requires removal of the authentication identity. Public contributions may be deleted or deidentified depending on the request and applicable law.
Some data may remain temporarily in backups, security logs, or restricted legal records. We retain only what is reasonably necessary for those purposes, do not use a minimal deletion-suppression record for other purposes, and delete or deidentify remaining data when the exception ends.
9. Security and international processing
We use administrative, technical, and organizational safeguards designed to protect personal data, including managed authentication, encrypted connections, access controls, and restricted owner tools. No system is perfectly secure, and Alpha software may contain defects.
Our providers may process data in the United States and other locations. Where required, we rely on provider commitments and lawful transfer mechanisms.
10. Children and legal drinking age
Bourbon Beacon is intended only for adults of legal drinking age and is not directed to children. We do not knowingly collect personal data from anyone under 18. If you believe a child has provided personal data, submit a deletion request immediately.
11. Changes and contact
We may update this policy as Alpha features, providers, or legal requirements change. The effective date and version at the top identify the current policy. Material changes may also be announced in the service or by email.
For privacy questions or requests, use /privacy/request. This routes the request into Bourbon Beacon’s durable owner review queue and provides a reference number. You may also use the general Feedback page for non-privacy questions.
12. Retention schedule
These are default maximums, not reasons to keep data unnecessarily. We may retain specific records longer when reasonably required by law, tax or accounting rules, fraud prevention, security investigations, litigation holds, or dispute resolution, and may delete data sooner when it is no longer needed.
DataDefault retention
Account and saved preferencesWhile the account is active; normally removed or deidentified within 45 days after a verified deletion request is approved.
Terms and Privacy acceptance recordsWhile the account is active and up to seven years afterward when reasonably needed to document consent, resolve disputes, prevent fraud, or comply with law.
First-party analytics events90 days.
Email delivery and estimated-open records180 days.
Rejected or unpublished community submissionsUp to 180 days after rejection or one year after submission, whichever occurs first.
Published community contributionsWhile published or useful to the community; removed or deidentified when required by an approved request.
Membership linkage and transaction support recordsWhile active and up to seven years when reasonably needed for tax, accounting, disputes, fraud prevention, or legal compliance. Stripe retains its own payment records under its policy.
Privacy-request and appeal recordsThree years after completion, with request details minimized after fulfillment.
Inventory historyInventory events: 180 days; staging data: one day. This is generally not personal data.
Security, hosting, and backup recordsTypically up to one year for security logs and up to 90 days for rotating backups, subject to provider settings and incident holds.