Privacy

What we collect

When you check out, book a space, buy tickets, or join the Cider Club, we ask for your name, email, phone, and — for anything shipped or invoiced — your address. Bookings may include dietary or accessibility notes you choose to share, so we can set things up right.

For alcohol orders, the law asks more of us: we record your attestation that you're 21 or older, along with the IP address it came from. That's an alcohol-compliance record, not marketing data.

Who helps us process it

A few trusted services handle pieces of every order:

• Stripe processes payments. Your card number goes straight to Stripe and never touches our site or servers.
• Resend sends our emails — receipts, ticket links, reminders.
• Telnyx sends our text messages, only to people who asked for them.
• Supabase hosts our database, where order records live.
• Vinoshipper handles licensing and carrier compliance for cider we ship, so they receive the name and address on shipped alcohol orders.
• Sentry, when we have it turned on, tells us when the site breaks. Error reports are scrubbed — no personal information goes in them.

Cookies and your browser

We don't run analytics or ad trackers, period. During checkout, Stripe sets a small number of cookies for fraud prevention — that's them keeping stolen cards out, not anyone following you around the internet. Your cart lives in your own browser's local storage; it never leaves your device until you check out.

What we never do

We don't sell your information. We don't rent it, trade it, or hand it to advertisers. Your email stays at the farm.

How long we keep things

Transaction records and alcohol-compliance records (including age attestations) are kept as long as tax and alcohol law require us to keep them. Everything else we keep only as long as it's useful for serving you.

Seasonal emails

Marketing email is opt-in only — you get it if you asked for it, like our season reminders. Every one of those emails has an unsubscribe link, and it works the first time.