Cookie Policy

1. Essential cookies

Our sign-in provider, Clerk, sets cookies to keep brewery accounts signed in securely. They exist only for authentication and are set when you sign in or up.

2. On the beer pages

Two cookies support the age check: one remembers your 21+ confirmation for up to one year, and one holds a two-letter country code for existing regional access restrictions. The minimum confirmation age is 21 everywhere. Neither cookie identifies you.

Which beers you have already rated is remembered in your browser's local storage, not in a cookie, so you are not asked to vote twice.

3. Two optional things, and your choice

When you scan a printed QR code, we leave a cookie for five minutes recording which code it was. If you then leave your email or rate the beer, the brewery can see that it came from a can rather than from a web search. It expires on its own, it is not readable by scripts on the page, and it identifies a printed code, not you.

We also count page views and taps on a brewery's own links, so that brewery can see what its printed cans actually did. That measurement uses a one-way hash of your browser and network, never your IP address, never across other sites, and never in a form that points back at you — the same standard the scan record itself has always used.

The banner on your first visit is how you turn both of these off. Choosing "Essential only" stops the attribution cookie and this measurement alike. Your answer is itself stored in a cookie so we do not ask again on every page; you can change it at any time with the "Cookie preferences" link in the footer.

Allow analytics enables PostHog product measurement on public pages, including brewery presentations, and Vercel visit/speed statistics on our marketing pages only. PostHog runs without persistent analytics storage or session replay. We remove query strings, referrers and share-link contents from event properties and never send form input. An additional consent cookie records approval of this scope; an earlier approval is not reused for PostHog. Essential only stops both types of optional measurement. The two preference cookies expire after 180 days.

First-party presentation measurement records the saved event, QR placement, venue, mode, beer interaction and selection count, not search text or flight contents. Fresh consent also allows in-memory random session identifiers and linked phone arrivals. Successful product actions can be counted by PostHog without private URLs or identities. Previous consent is re-requested for this scope. Screen exposure is not attendance; a handoff link is not proof of a camera scan. Raw events are kept for 24 months and deleted on brewery account closure.

4. What we do not use

No advertising cookies, no cross-site tracking, no analytics cookies from third parties, no fingerprinting.

5. Managing them

You can clear cookies and site data in your browser settings at any time. Clearing them signs you out and makes the age question appear again. Questions: hello@qrbeers.com.