Privacy
Your shelf is yours. We do not sell it, and we do not show it unless you share a card.
What we store
Account: email, display name, a password hash (Argon2id), and whether that email is confirmed. Invites store the invited address until it is used or cancelled. No plain-text passwords.
Shelf: bags and brew cards you save. Shared cards (and their public URL and image) are visible to anyone with the link. Everything else stays behind your session.
Where it lives
The app is hosted on Render. Postgres is on Neon. We do not use a third-party analytics suite on this PoC.
Your choices
Unshare a card to pull the public link. There is no self-serve delete or export yet. Ask the person who runs this host if you need an account removed.
Last updated 21 August 2026.