Privacy Policy
Last updated: February 2026
The Promise: Your Data Will Never Be Sold
I don't sell data. I won't sell data. Your information isn't a product. This is a community project for pub enthusiasts, not a data harvesting operation.
What Information We Collect
Account Information
- Username: Your chosen display name
- Email address: For account verification and important updates
- Password: Encrypted and stored securely (I can't see your password)
Content You Create
- Pub crawl routes you submit
- Pub information you add or edit
- Comments you post on routes
- Ratings you give to routes
Technical Information
- IP address (for security and spam prevention)
- Browser type and device information
- Pages you visit on the site
- Timestamps of your activity
How We Use Your Information
To Run the Platform
- Display your submitted routes and comments
- Let you log in and manage your account
- Send important updates about the site
- Moderate content and prevent abuse
To Improve the Service
- Understand which features are used
- Fix bugs and technical issues
- Make the site better for everyone
What We Don't Do
- ❌ Sell your data to third parties
- ❌ Share your email with marketers
- ❌ Track you across other websites
- ❌ Use your data for advertising
- ❌ Give your information to data brokers
Public Information
Some information is public by nature:
- Your username is visible on routes and comments
- Routes you submit are public (that's the point)
- Comments and ratings are visible to all users
Your email address is never shown publicly.
Cookies
We use minimal cookies:
- Session cookie: Keeps you logged in (essential)
- CSRF token: Security feature (essential)
No tracking cookies. No advertising cookies. No analytics cookies from third parties.
Third-Party Services
Hosting (Railway)
The site is hosted on Railway. They process your data as part of providing hosting services. They have their own privacy policy.
Maps (OpenStreetMap/Leaflet)
We use OpenStreetMap tiles via Leaflet for displaying maps. When you view a map, your browser requests map tiles from OpenStreetMap servers.
Geocoding (postcodes.io)
When you add a pub with a postcode, we use postcodes.io (a free UK government data service) to get coordinates. Only the postcode is sent, not your personal information.
Data Security
We take reasonable measures to protect your data:
- Passwords are encrypted (bcrypt hashing)
- HTTPS encryption for all connections
- Secure database with access controls
- Regular security updates
However, no system is 100% secure. Use a strong, unique password.
Your Rights
Under UK GDPR, you have the right to:
- Access: Request a copy of your data
- Correction: Fix inaccurate information
- Deletion: Request account deletion
- Portability: Get your data in a usable format
- Object: Object to certain processing
Email admin@pubcrawls.uk to exercise these rights.
Data Retention
- Account data: Kept until you delete your account
- Submitted routes: Kept indefinitely (they're public contributions)
- Comments and ratings: Kept indefinitely
- Logs and technical data: Kept for 90 days
If you delete your account, your username remains on past contributions (to preserve context), but you can't log in again.
Children's Privacy
This site is for adults (18+) who enjoy visiting pubs. We don't knowingly collect information from children.
Changes to This Policy
If we make significant changes to how we handle your data, we'll email registered users and post a notice on the site.
Contact & Complaints
Privacy questions? Email: admin@pubcrawls.uk
If you're unhappy with how we handle your data, you can complain to the UK Information Commissioner's Office (ICO).
TL;DR: We collect what's needed to run the site. We don't sell your data. Ever. You can delete your account anytime.