Cookie Notice

The short version

Brewstiller uses a small set of first-party, functional cookies and browser-storage entries: to keep you signed in, to keep the app secure, to remember your interface preferences, and (on public Story Pages) to remember that a visitor confirmed their age. That's it.

We use no advertising cookies, no cross-site tracking, no third-party analytics scripts, and no tracking pixels — nothing that follows you around the web, and nothing that needs a consent pop-up under current US law. If that ever changes, this notice will change first, with notice, and with consent mechanics where required.

1. What cookies and similar technologies are

Cookies are small text files a website stores in your browser. We also use browser localStorage (persistent key-value storage for preferences) and sessionStorage (cleared when the tab closes). This notice covers all three, plus any similar technology we use.

2. What we use, and why

2.1 Strictly necessary — the app cannot work without these

Blocking these prevents signing in and using the platform.

2.2 Preferences — functional convenience

2.3 Age attestation (public Story Pages only)

This is the only cookie Story Pages set. Story Pages contain no tracking cookies, no persistent identifiers, and no third-party scripts; scan analytics is limited to country/region, device class, and timestamp with no IP retention (Privacy Policy §4.6).

2.4 Product analytics — first-party, in our database

Our product analytics (which screens are used, where errors happen) is recorded server-side in our own database, tied to your account like any other use of the service — not by a third-party analytics cookie. No analytics script from Google Analytics, PostHog, Segment, Meta, or anyone else runs in the app. If we ever adopt a third-party analytics platform, this notice and the Subprocessor List will be updated first, with notice.

3. What we do not use

• No advertising or retargeting cookies.
• No cross-site tracking pixels (no Facebook/Meta Pixel, Google Ads tag, LinkedIn Insight Tag, or similar).
• No third-party analytics scripts.
• No fingerprinting.
• No selling or sharing of data collected via cookies — we don't sell or share personal information at all (Privacy Policy §6).

4. Global Privacy Control and Do Not Track

Because we do not sell or share personal information as state privacy laws define those terms, there is no sale or sharing for a Global Privacy Control (GPC) signal to opt out of. We will implement formal recognition of the signal if our processing ever makes it applicable.

We do not respond to the legacy "Do Not Track" header, which never gained a settled meaning; our practices are consistent with what users sending it intend.

5. How to control cookies

• Browser settings let you view, block, and delete cookies per site. Blocking the strictly-necessary set (§2.1) prevents sign-in.
• localStorage can be cleared via your browser's site-data controls; you'll lose saved UI preferences, nothing else.
• Because we use no advertising or third-party analytics cookies, there is nothing here for ad-industry opt-out tools (NAI/DAA) to act on.

6. Changes to this notice

If we add a cookie or similar technology, change a purpose, or adopt any third-party analytics or (contrary to current intent) advertising technology, we will update this notice before the change takes effect — with Privacy Policy §15's notice mechanics for material changes, and consent mechanics where applicable law requires them.

7. Contact

[email protected] · Brewstiller LLC.

Effective date: July 4, 2026 · Version: v1.1