Effective Date: September 1, 2026
Last Updated: September 1, 2026
This Privacy Policy explains how Craft Club Labs, Inc. ("Craft Club," "we," "us," or "our") collects, uses, discloses, and safeguards personal information when you use the Craft Club mobile application, website, and related services (collectively, the "Service").
By using the Service, you agree to the collection and use of information as described in this Privacy Policy.
When you create an account or use the Service, we may collect the following information:
Required during onboarding
Optional profile information
Optional taste and session preferences
If you complete our taste onboarding or attend a Rounds tasting session, we may also collect your flavor and style preferences, what you hope to get out of a session, your tasting experience level, your drinking-style preferences (including a preference for non-alcoholic options), and, optionally, your gender (used only to compose balanced tables). Your individual answers about drinking-style preferences are never displayed to other users.
Providing optional information is not required to use the Service.
Craft Club uses passwordless phone-based authentication via one-time passcodes (OTP). We do not use passwords for consumer accounts.
We use phone numbers solely for account authentication and security purposes. We do not send marketing text messages and do not use phone numbers for advertising or promotional outreach.
A secure, embedded custodial wallet is automatically created for your account through our authentication provider to support current or future digital collectible features. This wallet is not used for payments, financial transactions, or transfers and does not have independent monetary value.
We do not currently support third-party login providers such as Apple, Google, or Facebook.
The Service includes location-based features.
If you grant permission, we may collect precise location data (GPS coordinates) while the app is in use to:
We do not collect location data in the background and do not track your movements outside of active app usage.
Check-in Location Privacy Controls
When checking in, you control how location information is stored and displayed using the following options:
Your selection determines both what information is stored and what is visible to others.
We collect content you choose to create or share, including:
By default, tasting notes and photos are public. You may control visibility using your account-level privacy settings.
Available visibility options include:
Lists have their own per-list visibility controls.
If you RSVP to an event, we collect:
We do not collect separate RSVP-specific contact information. RSVP counts may be publicly visible. Attendee identities are shown only for users with public visibility settings.
If you provide an email address – through account settings, our newsletter signup, or a Rounds booking – we may send two kinds of email:
We use a third-party email provider (Loops) to deliver email on our behalf. We do not send emails to people who have not provided an email address.
The mobile app can send push notifications; you can disable them at any time in your device settings.
Where required by law - currently for certain users in Texas under the Texas App Store Accountability Act (SB 2420) - we receive age-range and verification-status information from the Google Play Store when you open the app, to confirm eligibility.
This information is provided by Google, used solely to determine access and comply with legal obligations, processed in real time, and not stored by us. We do not use it for analytics, advertising, or profiling. This applies to the Android app; comparable requirements may apply on other platforms in the future.
You can book a seat at a Rounds tasting session on our website without creating an account. When you book, we collect your name, email address, and booking details, plus a phone number if you choose to provide one to link the booking to an app account.
Payments are processed by Stripe. Your card number and payment credentials go directly to Stripe and are never received or stored by us; we store only the booking amount, currency, payment status, and a reference to the Stripe transaction. Stripe's handling of payment information is governed by its own privacy policy.
The Stripe checkout page includes a marketing-consent checkbox; whether we send you marketing email is governed by that choice (see Section 1.6). Booking confirmations, reminders, and cancellation notices are transactional and are sent either way.
We use Sentry for error monitoring and debugging.
Sentry may collect:
IP addresses are not collected through Sentry.
We may use analytics tools to understand how users interact with the Service and to improve functionality, performance, and reliability.
Analytics data may include information about feature usage, in-app interactions, and device or application metadata. Analytics providers may include services such as PostHog (product analytics) and Google Analytics (website analytics). These tools are used to understand and improve the Service and are not used to sell your data. Advertising measurement is separate and described in Section 2.5.
Our websites use:
You can control cookies through your browser settings. Blocking non-essential cookies does not affect your ability to use the Service.
Our hosting and content-delivery providers process IP addresses transiently to route requests, enforce rate limits, and prevent abuse. This information is not used to build advertising or marketing profiles, and retention is governed by those providers.
To measure the performance of our Instagram and Facebook advertising and to reach people likely to be interested in Craft Club, our websites (craftclub.xyz and app.craftclub.xyz) use Meta advertising tools:
These tools operate on our websites only; the mobile app does not currently include any advertising SDK. Under some state privacy laws, the use of these tools may be considered "sharing" personal information for cross-context behavioral advertising – Section 6 describes how to opt out. You can also limit the Meta Pixel with browser-level tracking controls and manage how Meta uses data about you in Meta's Ad Preferences settings.
We use personal information to:
We may share information:
Craft Club does not sell personal information for money. Except for the Meta advertising tools described in Section 2.5, we do not use personal data for targeted advertising or cross-app tracking.
All data is stored in the United States.
You may delete your account at any time through account settings.
When you delete your account:
We retain system backups and logs for limited periods to support security, compliance, and operational integrity. Retention periods vary by system and provider.
Depending on your location, you may have the right to:
California residents may exercise rights under the California Consumer Privacy Act (CCPA/CPRA).
To opt out of advertising-related sharing (Section 2.5), email legal@craftclub.xyz with the subject "Opt out of sharing" and we will exclude your identifiers from our advertising audience uploads and matching.
Requests may be submitted to legal@craftclub.xyz.
The Service is intended only for individuals 21 years of age or older.
We do not knowingly collect personal information from individuals under 21. If we discover that an account belongs to someone under 21, we will delete the account and associated data.
We implement reasonable administrative, technical, and organizational measures to protect personal information. However, no method of transmission or storage is completely secure.
We may update this Privacy Policy from time to time. Continued use of the Service after changes become effective constitutes acceptance of the revised policy.
If you have questions or requests regarding this Privacy Policy, contact:
Craft Club Labs, Inc.