Privacy Policy
TikiTracker is a personal drinks notebook: your bar, your recipes, a log of what you drank, and places worth remembering. It is a small personal project, not an ad business, and it is not affiliated with Disney, Trader Sam's, or any bar or brand it mentions. This page lists what we collect, what we do not, and who helps us run it.
Who we are
Enigma Factory Games operates TikiTracker at tiki-tracker.com. We are based in the United States. For questions or a deletion request, use Feedback inside the app.
Browsing without signing in
The recipe library, the venue directory and map, the drink and ingredient library, and the reading list are public. Browsing them does not create an account or record who you are. Google Analytics measures visits (see Analytics below). Our servers and our CDN (Amazon Web Services) keep ordinary request logs, such as IP address and page requested, for operating and securing the service.
What we collect from Google
Sign-in uses Google Identity Services with only the basic scopes
(openid, email, profile). From Google we receive
your email address (to find or create your bar), your display name, and your profile photo URL
(shown as your avatar). We never read Gmail, Drive, Calendar, Contacts, or Photos. After sign-in
we issue our own session token and stop using the Google token.
What we store for your bar
Everything below belongs to one bar (a "family" in the app). Other bars cannot see it.
- Bar and members. The bar's name, member display names and roles, member emails once they sign in, and invite tokens until claimed.
- Your notebook. Bottles and gear, the shopping list, recipes you add or copy, your saved recipes and versions, drink logs (drink, date, rating, notes, who was there, where), visits and albums, and places you saved, rated, or visited.
- Photos. The photos you upload, stored in Amazon S3 under your bar's own folder, with captions, tags, and sizes.
- Activity. A short log of sign-ins and milestones (for example, a member joining), visible to your bar's Editors. The operator sees per-bar counts (members, last sign-in) to keep the service running.
- Feedback. Messages you send with Feedback are stored as tickets with your name, email, bar name, and the page you were on. Deleting your bar does not erase a message you already sent.
- Session. A signed token in your browser's
localStorage, valid for 30 days.
What stays on your device
- "Nearest to me" on the venues page asks your browser for your location only when you choose it. The location stays in that page's memory, is never sent to us, and is gone on reload.
- An IndexedDB queue so a large photo upload can resume if you close the tab.
- Theme and a few display preferences in
localStorage.
An honest gap: photos added to a visit album are stored as the original file you uploaded. If your phone put GPS or other EXIF data in the file, it is still inside the stored original. We do not read it into TikiTracker. Single drink photos are resized in your browser before upload, which drops that data. Do not treat album originals as location-scrubbed.
What we do not do
- No ads, no advertising or remarketing pixels, and no selling or renting of data.
- No public profiles, feeds, streaks, or leaderboards. Nothing you log is shared outside your bar.
- No use of your Google account data beyond signing you in.
- No AI features today. If we add any, this page will say what is sent and to whom before they ship.
Analytics
We use Google Analytics 4 to see which pages and features get used, how fast pages load, and when something breaks. It records the pages you view, rough location (from your IP address, which Google Analytics does not store), device and browser, where you came from, searches typed into the recipe, venue, and drink library, and actions such as signing in, saving a recipe or venue, logging a drink, or starting a plan. When you are signed in it also records your random member ID and role (Editor or Viewer), never your name, email, notes, or photos. Page addresses are cleaned before they are sent, so invite links and the IDs of your own plans, visits, and logs never reach Google.
- Google Analytics sets first-party cookies (
_ga,_ga_*) to count repeat visits. - Advertising storage, ad personalization, and Google's advertising features are turned off.
- In the EEA, the UK, and Switzerland, and in any browser that sends a Global Privacy Control signal, no analytics cookies are set. Google receives cookieless measurements only.
- Data is kept for 14 months, then deleted by Google.
Turn analytics off in this browser. Analytics is on in this browser.
This is saved in this browser only. Google also offers a browser add-on that blocks Google Analytics on every site.
Things your browser loads from others
- Google: the sign-in script, the Google Analytics script, and the Fraunces and Karla web fonts.
- OpenStreetMap: map tiles, when a map is on screen.
- News publishers: a headline's preview image is loaded from the publisher's site.
Those services see an ordinary request from your browser, including your IP address.
Who processes data for us
- Amazon Web Services: hosting, database, photo storage, and CDN.
- Google: sign-in, and Google Analytics as described above.
The tip link opens PayPal in a new tab. We do not see or store payment details. There are no paid tiers. If that changes, this page will say so before any checkout exists.
Deletion
An Editor can delete the whole bar from the Family page by typing its name. That removes every member, recipe, log, list, place, album, and stored photo belonging to the bar. Signing out only clears the session in that browser.
Children
TikiTracker is about alcoholic drinks and is meant for adults of legal drinking age where they live.
Changes
If we start collecting more, add a new processor, or add any sharing, we will publish an updated policy with a new date first.