Privacy Policy

Last updated June 15, 2026

This Privacy Policy explains what information Clubcask (the “Service”) collects and how it’s used. By using the Service you agree to this policy.

1. Information we collect

Account & profile: your email address, display name, and a securely hashed password. If you enable two-factor authentication, we store the related secret and recovery codes.
Membership: which Clubs you belong to and your role in them.
Shipping addresses: the US addresses you save to your address book for fulfillment.
Orders: the releases you reserve, quantities, fulfillment choice, and status. We do not collect or store payment-card details — payment happens off-platform.
Technical & security data: limited log and security information, such as your IP address for security events (e.g. sign-in protection) and basic preferences like dark mode.

2. How we use it

To provide and operate the Service — accounts, memberships, releases, lotteries, and order records.
To send transactional emails (verification, invitations, order updates, and stock alerts you opt into).
To secure the Service and prevent abuse.

We do not sell your personal information.

3. How information is shared

Your Club: a Club’s admins can see your membership and the order details (including the shipping address on an order) needed to fulfill what you reserve from that Club.
Service providers: we use Cloudflare for hosting and data storage and Resend to send email. They process data on our behalf under their own terms.
Legal: we may disclose information if required by law or to protect rights, safety, and the integrity of the Service.

4. Cookies

We use a small number of cookies: a session cookie to keep you signed in, a theme cookie to remember light/dark mode, and an age-confirmation cookie to remember that you confirmed you’re of legal drinking age. We don’t use third-party advertising cookies.

5. Data retention & deletion

We keep your information while your account is active. You can leave a Club or delete your account at any time from your Account page; deleting your account removes it from every Club and releases any pending reservations. Some records may be retained as required for legal, security, or recordkeeping purposes.

6. Your choices

You can review and update your profile and addresses, manage stock-alert subscriptions, and delete your account from the Account page. For other requests about your data, contact us below.

7. Security

We protect accounts with hashed passwords, optional two-factor authentication, and sign-in abuse protection. No system is perfectly secure, but we work to safeguard your information.

8. Age

The Service is intended only for people of legal drinking age (at least 21 in the United States). It is not directed to children, and we do not knowingly collect information from anyone under that age.

9. Where data is processed

Our infrastructure is provided by Cloudflare and your information may be processed in the United States. By using the Service you understand your information may be handled there.

10. Changes

We may update this policy; material changes take effect when posted, shown by the “Last updated” date above.

11. Contact

Questions about your privacy: support@clubcask.io.