What this notice covers
This notice applies to bythevine.org and its supporting API and account features. It does not describe other Actual Logic products or independent websites linked from the journal.
You can read articles and use the calculator without an account. A browser journal is separate from an authenticated cloud journal. Authentication is provided by Firebase, billing by Stripe, and hosting and server storage by Cloudflare.
Account information
When you register or sign in, Firebase processes your email address, authentication credentials, verification and recovery actions, account identifiers and related technical information. Your display name is optional and can be updated in My account.
Passwords are handled directly by Firebase. By the Vine's API does not receive your password. It verifies a Firebase identity token when you request account, billing or cloud-journal operations.
We use account information to provide sign-in, verify access, display your account and respond to requests. Authentication messages you request are operational messages, not a marketing subscription.
Journal information and optional notes
A journal may contain dates, pour amounts and alcohol percentages, alcohol-free markers, feelings, intentions, reflections, saved stories, preferences and optional sleep notes. These records can reveal sensitive information about habits or health. Enter only what you choose to have processed.
Guest device-journal records stay in that browser. Signed-in account records use a browser-session cache and are sent to the server when you enable your cloud journal. Cloud sync is a membership feature. Existing guest records are not automatically associated with an account or uploaded.
An explicit import sends your own selected browser-journal content into your account journal; sample entries are excluded. Your journal is not published, shared with other members, used to create an advertising profile, or sent to an AI model by this service.
Cloud storage and access
Cloudflare hosts the website and API and stores cloud-journal data in D1. Journal content is encrypted by our server before it is saved. This is not end-to-end encryption: the service manages the encryption key so it can load your records when you sign in.
Access checks use the verified account identity. Billing records determine whether new cloud syncing is available. The server does not accept a browser's claim that it has an active membership.
We use access controls, encrypted connections and limited technical logging. No service or device can guarantee absolute security. Use a trusted browser, protect your account and sign out on a shared device.
Payments and billing records
Stripe collects payment and billing information in its hosted checkout and customer portal. The website does not collect card numbers or security codes. Stripe may process your email, billing address, payment method, invoices and transaction information under its own notices and service terms.
Our server stores a pseudonymous account reference, Stripe customer and subscription identifiers, subscription status, billing period information and the timing of verified billing events. It does not send journal notes, drinking records or sleep information to Stripe.
We use this information to collect subscription payments, prevent duplicate subscriptions, provide billing management, handle cancellations and meet accounting or other applicable obligations.
Browser storage and technical information
The site uses browser local storage for a guest device journal and selected preferences, and session storage for an authenticated account's temporary journal cache and sync state. Firebase uses browser persistence for sign-in; choosing to remain signed in can keep that authentication state across sessions.
Cloudflare and Firebase necessarily process technical information such as IP addresses, request metadata and security signals to deliver and protect their services. Our application logs are designed to avoid journal bodies, passwords, identity tokens and payment details.
No advertising network, behavioural analytics service or marketing-email service is connected in this release. Reminder preferences do not cause notifications to be sent. Links to independent sources have their own data handling.
Processors and permitted disclosures
We use Google Firebase for authentication, Cloudflare for delivery, API execution and storage, and Stripe for payment processing. These providers process information in the locations and under the safeguards described by their current terms and privacy notices.
We do not sell your journal or share it for targeted advertising. We may disclose information when necessary to operate or protect the service, comply with a valid legal obligation, respond to your request, or carry out a business transfer subject to appropriate protections.
Access by authorised personnel is limited to legitimate operational, support, security or legal needs. Do not include sensitive journal content in support emails unless you intentionally choose to share it.
Retention and deletion
Guest records remain until you clear them or the browser removes them. An authenticated session cache may be removed when you sign out or the browser session ends. Unsynced session records are not a durable cloud backup.
Cloud-journal records remain until you clear or delete them or delete the account. Canceling renewal does not automatically delete the journal. Existing cloud records can be viewed or exported after paid sync access ends.
Account deletion removes primary journal records, cancels the associated membership and removes the Firebase account when the authenticated deletion flow completes. We retain a minimal security record to prevent deleted account tokens from regaining access. Payment, invoice, tax and related accounting records may be retained by Stripe or us where necessary for applicable obligations.
Deleted primary data can remain temporarily in provider backups or recovery systems until those systems expire it under their retention policies. If an account-deletion step cannot finish, the interface will show that further action is required.
Your choices and requests
You can omit optional notes, use the browser journal without cloud storage, choose whether to enable sync or import older records, export current or cloud records, clear entries and request account deletion from My account.
Depending on the laws that apply to you, you may have rights to access, correct, delete, restrict or object to processing, obtain a portable copy, or make a complaint to the appropriate authority. Contact privacy@actuallogic.com with a request; we may need to verify your identity before acting.
The service is intended for adults aged 21 and over. If you believe a child has supplied account or journal information, contact us so we can investigate and address it.
Updates and contact
We will publish changes to this notice here and provide additional notice for material changes where required. These interim documents are under legal review; that status does not change the controls available to you.
Actual Logic Inc., 1820 W Orangewood Ave, Ste 105, Orange, CA 92868-5052, United States. Privacy: privacy@actuallogic.com. Support: info@actuallogic.com.