Privacy Policy

This Privacy Policy explains how Brew Shop (“Brew Shop,” “we,” “us,” or the “Service”), operated at phbz.org, collects, uses, and protects information about you when you use the Service. By creating an account or using the Service, you agree to the practices described here. If you do not agree, please do not use the Service.

Information We Collect

We collect only what we need to run the Service:

• Account information. When you sign in with Google, we receive your name, email address, profile photo, and a Google account identifier. We use these to create and identify your account. We never receive your Google password.
• Content you create. Characters, campaigns, stories, homebrew monsters, notes, chat messages, and other data you enter into our tools are stored so we can provide the Service to you and to people you choose to share a campaign with.
• Subscription and payment information. Payments are processed by Stripe. We do not collect or store your full card number or bank details — those go directly to Stripe. We store a Stripe customer ID, subscription ID, your current plan, and subscription status so we can grant the features you paid for.
• Technical data. Basic information your browser sends automatically (such as IP address and device/browser type) may be processed by our hosting and infrastructure providers for security and reliability. We use browser local storage to keep you signed in and to remember interface preferences.

How We Use Your Information

• To create, secure, and maintain your account.
• To provide, operate, and improve the Service and its tools.
• To process subscriptions and grant the corresponding features.
• To enable campaign features you opt into (sharing content with a Dungeon Master and party members).
• To communicate with you about your account, subscription, or support requests.
• To detect, prevent, and address fraud, abuse, or technical issues.
• To comply with legal obligations.

We do not sell your personal information, and we do not use it for third-party advertising.

Service Providers

We share information only with the providers that make the Service work, and only as needed for them to perform their function:

• Google Firebase (Authentication, Firestore database, and hosting infrastructure) — stores your account and content. See Google’s Privacy Policy at policies.google.com/privacy.
• Stripe (payment processing and subscription management) — handles your payment details directly. See Stripe’s Privacy Policy at stripe.com/privacy.

We may also disclose information if required by law, or to protect the rights, property, or safety of Brew Shop, our users, or others.

Sharing Within Campaigns

Some features are collaborative by design. If you join a campaign, the Dungeon Master and, where applicable, other party members can see content you share into that campaign — such as a character you bring to the table, chat messages, and combat status. Only share content you are comfortable making visible to those people.

Data Retention and Deletion

We keep your account and content for as long as your account is active. If your subscription lapses or you exceed a free-tier limit, some content may become read-only, but it is not deleted — it becomes editable again if you resubscribe or free up space.

You may request deletion of your account and associated data at any time by contacting us (see “Contact Us” below). Deleting your account removes your profile and the content associated with it. Some records may be retained where required for legal, tax, or fraud-prevention purposes (for example, Stripe’s records of past transactions).

Security

We rely on established providers (Google and Stripe) and industry-standard measures to protect your information, including database access rules that restrict your data to you and the people you share it with. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

Children’s Privacy

The Service is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us and we will delete it.

Your Rights

Depending on where you live, you may have rights to access, correct, export, or delete your personal information, or to object to or restrict certain processing. To exercise any of these rights, contact us using the details below. We will not discriminate against you for exercising them.

Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date above. Material changes will be reflected on this page; your continued use of the Service after an update means you accept the revised policy.

Contact Us

If you have questions about this Privacy Policy or your data, contact us at christopherstubbs14@gmail.com.