Cookie Policy

1. What cookies are

Cookies are small files a website stores on your device so it can remember things between page loads. Brewyard uses cookies for two purposes: keeping you signed in, and — only if you accept them — measuring how the site is used.

2. Strictly necessary cookies

These are required for the service to work and cannot be switched off without breaking sign-in.

• next-auth.session-token — identifies your authenticated session. Expires when you sign out or after 7 days of inactivity.
• next-auth.csrf-token — CSRF protection for sign-in / sign-up forms. Session lifetime.
• next-auth.callback-url — redirect target after sign-in. Session lifetime.

3. Analytics cookies (opt-in)

With your consent, we enable browser analytics (PostHog Cloud EU) to understand how the site is used — page views, clicks and performance metrics. Until you choose Accept on the cookie banner, no analytics code runs in your browser and no analytics cookie is set. If you accept, PostHog stores a pseudonymous identifier on your device; you can withdraw your consent at any time with the control below, and collection stops immediately. Separately from this choice, key account actions — for example signing up, connecting an API key, or creating a workspace — are recorded by our own servers under a pseudonymous account identifier, never your name or email address; that server-side measurement sets nothing on and reads nothing from your device. Data is processed in the EU and never sold.

4. What we don't do

• No advertising cookies.
• No third-party tracker pixels.
• No fingerprinting beyond what browsers send by default.
• No selling or sharing cookie-derived data with third parties outside the sub-processors listed in the Privacy Policy.

5. Managing cookies

You can clear or block cookies in your browser settings, but clearing the session cookie will sign you out. Your analytics choice lives right here: use the control below to enable or disable analytics cookies at any time. Disabling stops collection immediately; the server-side product analytics described above is cookie-free and unaffected by browser settings.

6. Contact

For cookie or privacy questions, email privacy@brewyard.ai.