Privacy Policy

01. Information we handle

We collect information from you, from content previously accessible to your account or included in backups you import, from WorkOS when you authenticate, and automatically from your browser, device, and our service providers.

We do not intentionally collect payment-card information, precise geolocation, government identifiers, biometric identifiers, contacts, photos, microphone recordings, health information, or advertising identifiers through the Service.

02. How we use information

We use information to:

• create and authenticate accounts and maintain sessions;
• store, synchronize, import, export, and display your private notebook and preserve change history;
• preserve previously accessible recipes, notes, favorites, drink history, and preset receipts as independent private copies during migration, and recover existing clients without losing their data;
• operate, troubleshoot, monitor, secure, and improve the Service;
• respond to support, privacy, and legal requests; and
• comply with law, enforce our terms, and protect the rights, safety, and integrity of users, the public, and the Service.

We do not use personal information for targeted advertising, cross-site profiling, eligibility decisions, or decisions producing legal or similarly significant effects. We do not use notebook content or personal information to train generative AI or machine learning models.

03. How we disclose information

We disclose information only as described below:

• Previously accessible content. Migration gives each account independent copies of all content it previously could access, including notes, favorites, drink history, preset receipts, and existing contributor display names. Old sharing ends: accounts cannot view or change one another's private notebooks. Later edits or deletion by a former author do not erase recipients' private copies, just as they do not recall imported backups.
• WorkOS. WorkOS provides account authentication, identity, session, and email-verification services. Authentication requests and credentials are processed by WorkOS.
• Cloudflare. Cloudflare delivers and protects the website and applications and hosts our Workers and SQLite Durable Object database. It processes stored account and notebook data as well as network and security information such as IP addresses.
• Sentry. Sentry processes limited, scrubbed error and performance diagnostics for troubleshooting and reliability.
• Apple. On iOS, Apple may process App Store and device diagnostics under Apple's policies. Apple's MetricKit supplies system performance and crash summaries to the app; Mix Stamp records only aggregate categories and counts in local system logs and does not send raw MetricKit payloads to our backend.
• Your direction. A backup you export is saved or shared through your browser, device, and destinations you choose. Those recipients' policies apply after export.
• Legal, safety, and business events. We may disclose information when reasonably necessary to comply with law or legal process, investigate abuse, protect rights or safety, or complete a merger, financing, acquisition, reorganization, bankruptcy, or sale of assets. A successor may use information only consistently with this policy unless it gives you legally required notice or obtains required consent.

We do not sell personal information for money. We do not "sell" or "share" personal information as those terms are defined by the California Consumer Privacy Act, and we do not share personal information for targeted advertising. We have not done so in the preceding 12 months. We therefore do not offer a "Do Not Sell or Share" link; if our practices change, we will update this policy and provide legally required controls before that change.

04. Cookies and tracking

The web app uses only cookies necessary to authenticate and secure the Service. An encrypted session cookie contains authentication tokens and basic account information and lasts for up to 30 days; it is refreshed while you use the Service. A temporary encrypted login cookie protects the sign-in flow and lasts up to 10 minutes. Both are Secure, HttpOnly, and SameSite=Lax. Signing out removes the session cookie and asks WorkOS to revoke that session.

We do not use advertising cookies, cross-site tracking pixels, session replay, or third-party marketing analytics. Because we do not sell, share, or use personal information for targeted advertising, Global Privacy Control and other opt-out signals do not change how the Service operates.

05. Retention and deletion

We keep account and private-notebook information while needed to provide the Service. Diagnostic, security, support, and provider records are kept according to our or the relevant provider's operational retention settings and may remain for a limited period after account or content deletion. Provider backups may retain information until they cycle out.

The migration consolidates independent copies of everything each account previously could access into its one private notebook, retaining recipes and all their content, notes, favorites, drink history, and preset import receipts. Archived original notebooks and journals are inaccessible recovery records. They remain until no affected account remains and are subject to legacy contributor erasure cleanup. They are not available for ongoing collaboration.

You can delete your Mix Stamp account from account settings without any separate book-management step. Deletion removes your private notebook and its change records, your authentication identity, and your migration linkage, and applies legacy contributor erasure cleanup to archived originals. It does not delete independent copies in another account's private notebook, including copies of content you originally authored. We retain opaque, non-content identifiers for deleted entities and changes to prevent reuse. A limited deletion-status record and one-way sign-in subject digest are removed after 30 days from completion during the next daily cleanup. They prevent stale credentials from recreating the deleted account and let you check completion.

Account deletion clears the app's local synchronized data, queued changes, caches, and Mix Stamp credentials. It also requests deletion of the Mix Stamp-managed WorkOS user record. Deletion remains pending while this cleanup retries; you can check its status after reconnecting. Your independent Apple or Google account is not deleted. If you used Sign in with Apple, follow Apple's instructions to stop using Apple ID for Mix Stamp; this is not a prerequisite for deleting your Mix Stamp account. We cannot recall files exported by you or other people. Other offline installations of your account remove synchronized content when they reconnect; they cannot be wiped immediately. An erasure reset discards affected unsynced drafts and queued edits so they cannot restore erased content. This does not erase another account's independent private copies.

Imported backups become independent content in the importing account's private notebook. Subsequent edits or account deletion by the original author do not erase those copies. Restores require verifiable source identifiers and a snapshot recorded after any account erasure; older or unverifiable backups cannot be restored online. Source-verification requirements do not create ongoing access between accounts. After a deletion-status receipt expires, the app may no longer be able to confirm completion. Clearing a retained local sign-in in that state does not itself confirm account deletion.

06. Your choices and privacy rights

You can:

• edit notebook content in the Service;
• export or import a JSON backup of your private notebook;
• sign out and revoke the current session; and
• erase your Mix Stamp account in account settings.

Depending on where you live, you may also have rights to know or access personal information; obtain a portable copy; correct or delete it; restrict or object to processing; withdraw consent where processing is based on consent; appeal a denied request; and not be discriminated against for exercising a right. You may use an authorized agent where local law permits. We extend the core rights to access, correction, deletion, and portability to all users, subject to identity verification and lawful exceptions.

Email joe@saiaai.dev with the subject “Mix Stamp privacy request” to exercise a right. Describe the request and the account email involved. We may ask you to verify your identity or authority and will use verification information only for that purpose. We will respond within the time required by applicable law. If we deny an appealable request, reply to appeal and explain why you believe the decision should change.

California law may provide additional rights to know, delete, correct, limit certain uses of sensitive personal information, and opt out of sale or sharing. Mix Stamp does not currently meet the published CCPA business thresholds and does not sell or share data, but we honor the core requests described above voluntarily. We do not offer financial incentives for personal information.

07. International users

Mix Stamp is operated from the United States. We and our providers may process information in the United States and other countries where privacy laws may differ from those where you live. Where required, transfers rely on legally recognized safeguards provided by our service providers, such as adequacy decisions or standard contractual clauses. Contact us to ask about applicable safeguards.

If European Economic Area, United Kingdom, or similar law applies, we process account, authentication, and notebook information because it is necessary to provide the Service you request; security, diagnostics, service improvement, and legal-request information for our legitimate interests in operating a safe and reliable Service; and information as necessary to comply with legal obligations. Where law requires consent, we will request it and you may withdraw it. Providing account and notebook information is not a statutory requirement, but without required account data we cannot provide a synchronized private notebook.

You may complain to the data-protection authority where you live, work, or believe a violation occurred. We have not appointed an EU or UK representative or data protection officer. Availability of the Service does not necessarily mean we intentionally offer it in every jurisdiction.

08. Children

Mix Stamp is a general-audience cocktail service and is not directed to children under 13. We do not knowingly collect personal information from a child under 13. If you believe a child under 13 has provided information, contact us so we can investigate and delete it. Users must also meet any higher minimum age required in their country to consent to online data processing or use the Service with a parent or guardian's valid authorization.

09. Security

We use safeguards intended to protect information, including encrypted transport, encrypted and HttpOnly web session cookies, iOS Keychain storage for native credentials, authorization checks, account-isolated notebook access, and telemetry scrubbing. No method of storage or transmission is completely secure, so we cannot guarantee absolute security. Keep exported backups and credentials private, use secure devices, and report suspected compromise promptly.

10. Changes and contact

We may update this policy as the Service or law changes. We will post the revised policy here, update its effective date, and provide any additional notice or consent required for material changes. We will review it at least annually.