What we collect. What we don't. What you can ask for.

Waitlist signups. When you join the first flight list at /pages/waitlist or the footer signup form, we collect:

• email — what you typed
• referral_code — 8 characters we auto-generate so you can refer friends
• referred_by — optional, only set if you arrived via a ?ref= link from another member
• position — your place in the queue, from a Postgres sequence
• utm_source — only if you arrived from a tagged link (campaign tracking)

Captured at POST /api/waitlist, persisted in waitlist_signups. Source code: routes/waitlist.js.

Contact inquiries. When you send a message from /pages/contact, we collect:

• name (1–120 chars)
• email
• inquiry_type — General, Press, Wholesale, or Collaboration
• message (1–4000 chars)

Forwarded via the Polsia email proxy to the founder inbox (routes/contact.js → services/email.js). Not written to a birrd database — handled in the founder's email client.

Server-side analytics. Every public page records one row in page_views with:

• the path you visited
• the referrer that brought you there
• your user-agent string
• a SHA-256 hashed IP — we hash before insert, never store the raw IP
• UTM params if present (utm_source, utm_medium, utm_campaign)

Tracked by pageViewMiddleware and persisted by db/pageviews.js. Plausible (PLAUSIBLE_DOMAIN) is cookieless and does not collect IP or personal identifiers — that's why we run it alongside the server-side log.

Waitlist email → launch announcements, your referral code, and (during wave drops) your one-time discount code. We will not email you about anything that isn't a birrd drop.

Contact inquiries → a human reply from the founder. We use the inquiry type to route it to the right inbox.

Analytics → aggregate traffic and conversion reporting used in our internal CEO cycle review. Hashed IPs are kept long enough to spot drops and referrals, then rolled off.

Waitlist rows — until you unsubscribe (link in every email) or 24 months of inactivity, whichever comes first.

Contact messages — handled in the founder inbox, not stored in a birrd database. Email retention follows the founder's email provider defaults.

Analytics — page_views rows roll off after 24 months. Aggregate, anonymized counts may be retained longer.

• Stripe — payment processing. Card data never touches our servers.
• Polsia Email Proxy — transactional email (waitlist confirmation, contact handoff).
• Neon — managed Postgres hosting for our database.
• Cloudflare R2 — image and static asset hosting.
• Plausible — cookieless, GDPR-friendly analytics.

We don't share, sell, or rent your personal data to anyone for advertising.

Reach out via /pages/contact and we'll action your request within 30 days. Specifically, you can ask:

• Access — a copy of the personal data we hold on you.
• Correction — fix anything wrong or outdated.
• Deletion — remove your waitlist row and stop any further emails.
• Portability — receive your data in a machine-readable format.
• Withdraw consent — unsubscribe from launch emails at any time; the link is in every message we send.
• Complain — you also have the right to lodge a complaint with a data-protection supervisory authority in your jurisdiction.

We don't set cookies on birrd. Plausible is cookieless by design and does not collect IP or personal identifiers. Google Analytics 4 may set first-party analytics cookies — if you want to opt out, use your browser's analytics-blocking setting or a content blocker.

This is the first published version of the birrd privacy policy. We will update the date above when anything changes. Material changes will also be mentioned at the top of the page and in the next launch email.