Privacy Policy
Effective Nov 1, 2026
This policy explains what Tavern Trail (“Tavern Trail”, “we”) collects, why, and the choices you have.
Information we collect
- From Google sign-in: your name, email address, profile picture and a Google account identifier. We request only the basic
openid,emailandprofilepermissions to sign you in. - Business information that owners and staff enter: business details, hours, menus, inventory, sales figures, leagues, campaigns and website content.
- Guest activity: the businesses you follow or pin.
- Technical and security data: IP address, browser type and a record of account changes (audit history) kept to protect accounts and investigate problems.
How we use it
- To sign you in and keep your account secure.
- To run the Service for Businesses: storing their data and showing it on their pages, websites and guest feeds.
- To show guests posts from the Businesses they follow.
- To keep an audit history of changes inside each Business account.
We do not sell personal information, and we do not use it for advertising.
What Businesses can see
When you follow a Business, that Business can see that you follow it and the name on your guest account. Businesses cannot see the other places you follow.
Google user data
Tavern Trail's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. If a Business later connects Google services such as Drive, Calendar, Contacts or Gmail, we will ask for those permissions separately, use that data only to provide the features the Business turned on, and never use it for advertising or sell it.
Cookies
We use one essential cookie to keep you signed in. We do not use advertising or third-party tracking cookies.
Service providers
We use providers to host the Service and its database (Railway), to sign you in (Google), and to serve web fonts (Google Fonts). They process data only on our instructions.
Retention and deletion
We keep information while your account is active. Guests can delete their account from their profile page; Business owners can request export or deletion of their Business's data. Audit records are kept for as long as the Business account exists so changes can be traced and restored.
Security
Connections use HTTPS, sessions are stored server-side, and any tokens from connected services are encrypted at rest.
Children
The Service is not directed to children under 13, and we do not knowingly collect their information.
Changes and contact
If we change this policy we will post the new version here with a new effective date. Questions or requests: privacy@taverntrail.pro.