Privacy Policy

1. Who we are

Cabinet Cocktails is a cocktail-recommendation application that uses your device's camera to photograph a liquor cabinet, shelf, or bar cart, and returns cocktails you can make from the bottles visible in the photo.

It is operated by Cabinet Studios, an unincorporated business operated by Graham Gillies as a sole proprietor, based in California, United States. In this policy we refer to ourselves as "Cabinet Studios," "we," "us," or "our."

This policy applies to your use of:

• The Cabinet Cocktails web application at cabinet-cocktails.com
• The Cabinet Cocktails Android application, once available on Google Play

2. Information we process

2.1 Cabinet photos (processed, not stored)

When you use Cabinet Cocktails to analyze a cabinet, the photo is transmitted from your device to our web server, which forwards it to a third-party AI service for identification of visible bottles. After the AI service returns its response, our server discards the photo. We do not retain it, archive it, back it up, or associate it with you in any way.

The AI service we use does not retain images sent via its API for training purposes; inputs are processed only as needed to generate a response and then discarded.

2.2 Data on your device

Cabinet Cocktails does not currently store any data on your device between sessions. When you close the browser tab or Android app, nothing persists.

We plan to offer a one-time purchase option for unlimited scans in a future release. When that launches, Cabinet Cocktails will store two small values in your device's local storage:

• A counter of how many analyses you have performed, used to determine when a free-scan limit has been reached
• A flag indicating that you have purchased the unlock through Google Play, if you do so

These values stay on your device. They are never transmitted to us and we have no way to read them remotely. When this feature ships, we will update this policy with a new effective date.

2.3 What we do not collect

To be explicit, Cabinet Cocktails does not collect, receive, or process any of the following:

• Your name, email address, phone number, postal address, or any other contact information
• Your location, whether GPS, IP-based, or inferred
• Device identifiers, advertising IDs, or device fingerprints
• Facial data, biometric data, or any identifying human-subject data from the photos you submit
• Your browsing history, other installed apps, or any files on your device other than the one photo you explicitly submit

Beyond the Google Analytics cookies described in section 4.4, we do not set any cookies. We do not use cookies for authentication, advertising, or cross-site tracking.

3. How we use what we process

We use your submitted photo for one purpose only: to call the third-party AI service, receive the resulting cocktail recommendations, and return those recommendations to your device. That is the sole use.

We do not use any information for advertising, marketing, profiling, or any secondary purpose. We do not sell, share, or rent any user information to any third party, because there is nothing to sell, share, or rent.

4. Third-party services in the data path

Four third parties are involved in Cabinet Cocktails' operation. They act as service providers to us, not as independent data controllers.

4.1 Anthropic (Claude Vision API)

Your submitted photo and a system prompt are sent to Anthropic for image analysis. Anthropic is a US-based AI company that provides the Claude AI models. Anthropic's handling of this data is governed by their own privacy policy, available at anthropic.com/legal/privacy.

4.2 Google Play Billing (future)

When the paid unlock becomes available in a future release, purchase transactions will be handled entirely by Google Play. Google's privacy policy at policies.google.com/privacy governs those transactions. We receive only a confirmation that a purchase occurred; we do not receive your payment method, your real name, your email, or any other identity information from Google.

4.3 Render (hosting)

The Cabinet Cocktails web application is hosted on Render.com, a US-based cloud hosting provider. Render provides the server infrastructure we run the application on. It does not access or process your photos for any purpose beyond the transient hosting of our web application.

4.4 Google Analytics 4 (Firebase)

We use Google Analytics 4, operated by Google LLC, to understand aggregate product usage — for example, how many people open the application, how many cabinet scans succeed, and which cocktails are suggested most often. This information helps us improve the application and make decisions about future development.

What Google Analytics receives:

• Page-view events when you load the application.
• A small set of custom product events (app open, cabinet scan, cocktail suggested, scan rejected). These events carry category labels and counts only — never the contents of your photo.
• Your approximate location, derived from your IP address. Google Analytics 4 does not store full IP addresses.
• Browser and device type, used to render the application correctly and to monitor compatibility.
• A first-party cookie named _ga (and a related _ga_* variant) used to distinguish unique browsers across sessions. These cookies expire after two years and contain a randomly generated identifier — not your name, email, or any persistent personal information.

What Google Analytics does not receive:

• The image you submit, or any data derived from it.
• Account information or any persistent identifier we could use to recognize you across devices. We have not enabled the User-ID feature.
• Cross-site tracking data — Google Signals and Google Analytics advertising features are disabled on our property.

Our legal basis for processing this data is legitimate interest in understanding how Cabinet Cocktails is used in order to improve it. Google's handling of analytics data is governed by their privacy policy at policies.google.com/privacy.

How to opt out: You can prevent Google Analytics from collecting any data about your visits by enabling Do Not Track in your browser, by using a privacy extension such as uBlock Origin or Privacy Badger, or by installing Google's official opt-out browser add-on at tools.google.com/dlpage/gaoptout. Opting out will not affect your ability to use Cabinet Cocktails.

5. Data retention

Photos: Not retained. Discarded the moment the AI service returns its response.

On-device data: Retained on your device until you clear your browser's site data or uninstall the Android app. You are in control of this.

Server logs: Our web server retains routine operational logs — request paths, response status codes, timestamps, and transient IP addresses — for approximately 30 days for debugging, performance tuning, and abuse prevention. These logs do not include photo content or any information that identifies you personally beyond the short-term IP address routinely visible to any web server.

6. Your rights

Because Cabinet Cocktails does not maintain records of you as an individual user, most data-subject rights are self-service:

• To delete all data Cabinet Cocktails has about you: clear your browser's site data for cabinet-cocktails.com, or uninstall the Android app. There is nothing on our servers tied to you to delete.
• To stop using Cabinet Cocktails: simply stop using it. No account closure or unsubscribe process is required.

6.1 California residents (CCPA / CPRA)

If you are a California resident, you have the right under the California Consumer Privacy Act and the California Privacy Rights Act to know what personal information a business has collected about you; to request deletion of personal information; to correct inaccurate personal information; to opt out of the sale or sharing of personal information; to limit the use of sensitive personal information; and to be free from discrimination for exercising these rights.

The personal information Cabinet Cocktails collects is limited to the analytics data described in section 4.4 above. We do not sell or share personal information, and we do not engage in cross-context behavioral advertising. To exercise CCPA/CPRA rights regarding analytics data — including a request for deletion or opt-out — contact [email protected] and we will respond within the statutory time limits.

6.2 European Union, United Kingdom, and other jurisdictions

If you are in the European Union, the United Kingdom, or another jurisdiction with data-protection rights (GDPR, UK GDPR, or equivalent), you have the right to access, rectify, erase, restrict processing of, object to processing of, and port any personal data we hold about you. The personal data we hold is limited to the analytics data described in section 4.4 above. To exercise these rights — including erasure or restriction of processing — contact [email protected]. You can also opt out of analytics collection directly using the methods described at the end of section 4.4.

You also have the right to lodge a complaint with your local data-protection supervisory authority.

7. Children's privacy

Cabinet Cocktails is designed for adult users. The app presents cocktail recipes containing alcohol and is rated Mature 17+ on Google Play. We do not knowingly collect information from children under 13 (or under 16 in jurisdictions where that is the applicable threshold), and do not direct the service to children.

If you are under the legal drinking age in your jurisdiction, do not use this application. If you believe a child has submitted information to Cabinet Cocktails, contact [email protected] and we will take appropriate action.

8. International users and data transfers

If you use Cabinet Cocktails from outside the United States, your submitted photo will be transmitted to servers located in the United States (our hosting provider and our AI service provider — both named in section 4 above). By using the application, you consent to this transfer.

We do not execute Standard Contractual Clauses or perform Transfer Impact Assessments because we do not identify you as an individual; there is no personal data flowing across borders in a form that would trigger those requirements.

9. Security

We take reasonable commercial measures to protect the data that passes through Cabinet Cocktails:

• All network traffic to and from cabinet-cocktails.com is encrypted using HTTPS / TLS.
• Photos are transmitted, processed, and discarded within a single request lifecycle.
• The web application employs rate limiting and request validation to prevent abuse.

No system is perfectly secure, and we cannot guarantee against all possible threats. But because we do not store personal data, the consequences of a potential breach of our server are inherently limited.

10. Changes to this policy

We may update this policy from time to time — for example, when we ship the paid unlock feature described in section 2.2. When we do, we will post the updated policy at cabinet-cocktails.com/privacy with a new effective date. Material changes will be accompanied by a more prominent notice.

Because Cabinet Cocktails does not maintain contact information for users, we cannot notify you of changes directly. We recommend checking this page occasionally if you are concerned about how your data is handled.

11. Governing law

This policy is governed by the laws of the State of California, United States, without regard to conflict-of-laws principles. Any disputes arising from this policy or from your use of Cabinet Cocktails will be resolved in the state or federal courts located in Marin County, California.

12. Contact

For any privacy question, request, or concern, contact us using the information below. We respond to privacy inquiries within 30 days, and sooner when the matter is time-sensitive.