Privacy Policy

From businesses

• Account information, such as your name, email address and password (stored in a protected, non-readable form), or the basic profile information Google shares if you choose Google sign-in.
• Business information you enter, such as your business name, location, logo, website and social media links, and the menus and beverages you publish.
• Subscription and billing records. Payment card details are handled by our payment processor; we do not receive your full card number.

From guests

• Ratings, favorites and optional private notes you enter during a tasting. Without a Flight Journal, these are linked only to a random identifier stored in your browser, not to your name or email.
• Your email address, if you ask us to email your tasting or sign in to your Flight Journal, and the first name (and optional last name) you give when saving a tasting.
• Your marketing preference for each business, if you choose to opt in, including what you agreed to and when.

From everyone

• Your email address, if you join our list for launch updates.
• Usage and device information collected automatically, such as pages and menus viewed, QR codes scanned, actions taken in the product, general device type, the website that referred you, and the date and time. We use your IP address to protect the service from abuse but do not store it in readable form.
• Anything you send us when you contact us.

• To provide, maintain and support FlightNotes.
• To sign you in and send the emails you request, such as account confirmations, sign-in links, tasting records and launch updates.
• To show businesses aggregated analytics about their own menus.
• To process subscriptions and payments.
• To keep the service secure and prevent fraud and abuse.
• To understand and improve how the product is used.
• To comply with the law and enforce our terms.

A business sees guest ratings and favorites for its own menus only in combined form — for example, averages, counts and top-rated beverages. Business views do not link your ratings to your email address. If you use the Flight Journal, your own ratings and favorites are shown to you there.

Tasting notes are private to you. Businesses cannot see them, and they are not used in analytics. Our staff access them only when necessary to operate, secure or support the service, or when required by law.

If you enter your email after a tasting, we send you a record of it with a passwordless link to your Flight Journal, and we connect your tasting to that email so you can see it on any device. We use this address only to send you the records and sign-in links you ask for and to operate your Flight Journal.

Saving a tasting does not sign you up for marketing.

When you save a tasting, you can separately choose to receive news and events from that business. This is optional and unchecked by default.

• If you opt in, we share your email address and the name you gave with that business so it can contact you. The business is responsible for the messages it sends and for its own privacy practices.
• You can withdraw at any time from Places in your Flight Journal. After you withdraw, the business no longer receives your address from us. To stop messages from a copy the business already has, use its unsubscribe link or contact the business directly.
• Businesses do not receive email addresses or names that were given only to save a tasting.

We do not sell your personal information, and we do not share it for cross-context behavioral (targeted) advertising. We disclose personal information only:

• to service providers that help us run FlightNotes;
• to a business, when you opt in to its marketing (see above);
• when required by law, or to protect the rights and safety of our users, the public or FlightNotes;
• as part of a merger, acquisition or sale of assets, subject to this policy.

Our service providers include:

• Hosting, database and email providers — Run our servers, store our data and deliver the emails you request, on our behalf.
• Stripe — Processes subscription payments for business accounts.
• Google — Provides optional “Continue with Google” sign-in for business accounts, only if you choose it.
• Catalog.beer — Supplies beverage catalog data. It receives the search terms a business enters, not guest information.

We use only cookies that are necessary for FlightNotes to work: to keep businesses and Flight Journal users signed in, to remember a tasting in progress on your device, and to secure sign-in with Google. Your light or dark theme choice is saved in your browser.

We do not use advertising cookies or third-party analytics trackers. You can block or delete cookies in your browser, but signing in and saving tastings will not work without them.

We do not track you across other websites over time, and we do not allow third-party advertising or analytics companies to collect information about your activity on FlightNotes for that purpose. Because of this, FlightNotes works the same way whether or not your browser sends a “Do Not Track” signal.

We keep personal information only as long as needed for the purposes in this policy — for example, while your account is open, to provide businesses with their menu history, or to meet legal obligations. Email and marketing-consent records collected when a guest saves a tasting are deleted automatically after a set period; a Flight Journal stays until you delete it. When information is deleted, copies may remain in backups for a limited time.

We use reasonable safeguards to protect personal information, including encrypted connections, protected password storage and access controls that keep each business’s data separate. No system is completely secure, so please keep your sign-in details and email account safe.

• Guests can review their tastings in the Flight Journal, withdraw marketing consent under Places, and permanently delete their Flight Journal under Account.
• Businesses can review and update their account and business information in the dashboard. To request a copy of your information or close your account, contact us.
• Anyone can contact us to ask what personal information we have about them, or to request that we correct or delete it. We may need to verify your identity first.

If you are a California resident, depending on how California law applies to us, you may have the right to know what personal information we collect, use and disclose; to request access to, correction of, or deletion of it; and to opt out of its sale or sharing. As described above, we do not sell or share personal information for targeted advertising, and we do not knowingly sell or share the personal information of consumers under 16.

We will not discriminate against you for exercising your privacy rights. You may also ask for information about any disclosures of your personal information to third parties for their own direct marketing, which happens only if you opt in to a business’s marketing. To make any request, contact us using the details below.

FlightNotes is not directed to children under 13, and we do not knowingly collect their personal information. Tasting menus often feature alcoholic beverages intended for people of legal drinking age. If you believe a child has given us personal information, contact us and we will delete it.

We may update this policy from time to time. We will change the “Last updated” date at the top of this page and, for material changes, give more prominent notice, such as on the site or by email.

For privacy questions or requests, contact: