BrandTea is built on anonymity. We believe creators should be able to share honest experiences without exposing their identity. Our privacy practices are designed to collect as little data as possible, use it only for legitimate platform purposes, and never sell your information to anyone.

This Privacy Policy explains what information we collect, how we use it, and the choices available to you. By using BrandTea, you agree to the practices described in this policy.

BrandTea is intentionally designed not to require or collect personal account information. We do not collect:

• Your name
• Your email address (unless you voluntarily contact us)
• Your social media handles or usernames
• Your exact geographic location
• Any other personally identifiable information that would allow us or others to identify you as an individual

You can use the majority of BrandTea without creating an account or providing identifying information.

We collect limited information necessary to operate the Platform:

• Anonymous review content you submit, including ratings, text, tags, rate information, and related metadata associated with your submission (but not your identity).
• Device fingerprint: a technical identifier generated to help prevent spam and duplicate submissions. This identifier is not linked to your name, email, or social profiles.
• Browser localStorage preferences (such as niche, follower range, and platform selections) stored only on your device and not transmitted to our servers as personal profile data.
• Basic analytics such as page views and general traffic patterns. These analytics do not include personal identifiers tied to individual users.

We use the limited information we collect to:

• Display anonymous reviews and related content to other users of the Platform.
• Prevent spam, abuse, and duplicate review submissions from the same device.
• Improve platform performance, reliability, and user experience.
• Respond to legal requests, enforce our policies, and protect the safety of users and the Platform.

We never use your data for targeted advertising. We never sell your data to any third party, including brands, agencies, advertisers, data brokers, or marketing partners.

We use FingerprintJS (or similar technology) to generate an anonymous device identifier stored locally and associated with review submissions. This identifier is used solely to enforce our one-review-per-brand policy and to reduce spam and fraudulent activity.

The device fingerprint cannot be used by BrandTea to identify you personally in the real world, and it is not shared with brands, agencies, or other third parties for marketing or identification purposes.

BrandTea relies on trusted infrastructure providers to host and operate the Platform. These providers process data on our behalf and under their own privacy policies:

• Supabase (database hosting) — stores anonymous review data and platform content. Privacy policy: supabase.com/privacy
• Vercel (hosting) — serves the application and related infrastructure. Privacy policy: vercel.com/legal/privacy-policy

We encourage you to review the privacy policies of these providers for more information about how they handle data.

BrandTea does not use tracking cookies for advertising or cross-site behavioral profiling. We use localStorage, which is stored only on your device, to save preferences such as onboarding selections and device-related settings.

You can clear localStorage at any time through your browser settings. Clearing localStorage may reset your on-device preferences but will not delete reviews you have already submitted.

If you are located in the European Union or European Economic Area, you may have rights under the General Data Protection Regulation ("GDPR"), including the right to access, correct, delete, or restrict processing of your personal data, and the right to object to certain processing activities.

Because BrandTea collects minimal personal data and is designed around anonymous submissions, many GDPR rights are inherently protected by our architecture. If you have questions or wish to exercise your rights, contact hello@brandtea.app.

California residents have rights under the California Consumer Privacy Act ("CCPA"), including the right to know what personal information is collected and the right to request deletion of personal information.

BrandTea does not sell personal information as defined under the CCPA. We do not collect personal information such as name, email, or government identifiers as part of normal Platform use. California residents may contact hello@brandtea.app with privacy-related requests.

Anonymous review content is retained indefinitely to maintain the integrity, usefulness, and historical record of the Platform. Reviews deleted by users within the 24-hour self-deletion window are removed from public display but may be retained in our database for moderation, abuse prevention, and legal compliance purposes only.

Device fingerprints and technical logs may be retained for a reasonable period necessary for security and anti-abuse purposes.

BrandTea is not intended for users under 18 years of age. We do not knowingly collect information from minors. If we learn that we have inadvertently collected information from someone under 18, we will take steps to delete that information promptly.

We may update this Privacy Policy from time to time. When we make material changes, we will notify users by updating the date at the top of this page. We encourage you to review this policy periodically. Continued use of the Platform after changes constitutes acceptance of the updated policy.

For privacy questions or requests, contact hello@brandtea.app.