Privacy Policy

Overview

BrewThanks is a digital gifting platform. We keep your data to the minimum needed to operate the service. We do not sell data to third parties.

What we collect

• Email address — used to identify your account, send gift claim links, and deliver reward vouchers.
• IP address — recorded temporarily for security and rate-limiting purposes only. Not linked to your identity beyond session context.
• Transaction reference IDs — Stripe checkout session IDs and internal gift/drop reference numbers, used to track payment status and prevent double-processing.
• Country selection — entered by gift recipients to determine which reward brands are available in their region.

What we do not collect

• Home or delivery addresses
• Payment card numbers (card processing is handled entirely by Stripe)
• Government-issued ID or date of birth
• Phone numbers

Third-party processors

We use the following services to operate BrewThanks:

• Stripe — payment processing. Your card data is handled directly by Stripe and subject to their privacy policy.
• Resend — transactional email delivery (claim links and voucher emails).
• Supabase — database hosting (user accounts, wallet balances, gift records). Data stored in the EU/US depending on project configuration.
• Reward voucher providers — when a recipient selects a brand, their email may be shared with that provider to deliver the reward.

Data retention

Account and transaction data is retained while your account is active. If you close your account, contact us and we will delete your personal data within 30 days, subject to any legal obligations to retain transaction records.

Your rights

You may request access to, correction of, or deletion of your personal data at any time by contacting us. We will respond within 30 days.

Contact

Privacy questions: admin@brewthanks.com