Privacy
Last updated 25 August 2026
1Pour works without an account and without a network. If you never sign in, nothing you do in the app reaches us at all - your bar, your favourites, your settings and everything you type into the Junk Drawer stay on your device.
This page describes what happens when you do sign in, because that is the only time we hold anything. It is written against what the code actually does rather than against what a privacy policy usually says.
This text has not been reviewed by a lawyer. It is an accurate description of the software written by the people who built it, which is not the same thing as legal advice or a compliant notice in every jurisdiction.
Who we are
1Pour is made by 0101 Inc. The app and the website talk to one API at
1pour.io, hosted on GearHost, with data stored in a
Microsoft SQL Server database. Questions, requests and complaints:
[email protected].
What stays on your device, always
None of this is ever uploaded, whether you are signed in or not:
- Your bar - every bottle and ingredient you have ticked.
- Bottle levels and quantities, if you track them.
- Anything you type into the Junk Drawer.
- Every setting: measurements, region, Family Mode, reduce motion.
- The optional session tracker, which clears itself after ten hours.
- House tabs.
- Drinks and ingredients you create, unless you choose to publish one.
Backups you export are files you make and keep. We never see them.
What we store when you sign in
| What | Why | Notes |
|---|---|---|
| Email address | To sign you in and let you recover the account | Optional. Anonymous device accounts and Google/Apple sign-in have none. |
| Password | To sign you in | Stored only as a hash. We cannot read it or recover it for you. |
| Display name and avatar seed | To put a name on a published drink | You choose the name. The avatar is generated from a random value, not a photo. |
| Sign-in provider | To know which button signs you back in | For Google or Apple, the identifier they give us. Never your Google or Apple password. |
| Whether you confirmed you are of legal drinking age | Because this is an app about alcohol | A yes/no, not a date of birth. We never ask for one. |
| Favourites and ratings | To sync them between your devices | A rating can include a note you write. Notes are visible to others. |
| Drinks you publish | To show them in the community feed | Public by design, under your display name. |
| Votes and reports | To rank the feed and to moderate it | Votes are counted, not shown per-person. Reports are not anonymous to us. |
| Session tokens | To keep you signed in | Stored hashed, with an expiry, and revoked when you sign out. |
| Your phone's make and model | So you can tell your sessions apart when you sign out of one | The name the phone reports, such as “Google Pixel 7”. Stored with the session and deleted with it. It is not a device identifier and cannot single out your phone from any other of the same model. |
| Account timestamps | Housekeeping | When the account was made, last updated, and last seen. |
IP addresses
To stop somebody guessing passwords or flooding the API, requests are counted per user, or per IP address where nobody is signed in. Those counters contain the IP address in readable form. They are deleted once the window is more than six hours old, which happens during routine housekeeping - so in practice a few hours, though on a very quiet day it can be longer. They are not used for anything else and are never linked to your activity in the app.
Our host keeps its own web server logs, which we do not control and do not use.
What we never collect
- Location, of any kind.
- Contacts, photos, files or the microphone.
- Advertising identifiers. There is no advertising and no analytics SDK.
- Date of birth.
- Payment details. Nothing in 1Pour costs money.
Who else sees it
Nobody buys this data, because we do not sell it, and nobody is sent it for advertising, because there is no advertising. It is shared only with:
- Our host, who runs the server and the database and can therefore reach the data in the course of running it.
- Google or Apple, if you choose to sign in with them - and only to the extent of that sign-in.
- Other people using 1Pour, for the things that are public by design: a drink you publish, the display name on it, and a note you attach to a rating.
- Anyone we are legally required to disclose to.
How long we keep it
- Account details: until you delete the account.
- Favourites and ratings: until you remove them, or delete the account.
- Session tokens: until they expire or you sign out, then cleared.
- Rate-limit counters holding IP addresses: usually a few hours.
- Published drinks: see below.
Deleting your account
You can delete your account from the app, or by calling
DELETE /api/v1/me/index.php while signed in. It takes effect
immediately and signs out every device.
Being precise about what that does, because "delete" is often used loosely:
- Your email address, password and sign-in provider identifier are erased.
- Your display name is replaced with "Deleted user".
- Every session token is revoked.
- Drinks you published stay up, but with no author attached to them. This is deliberate: other people may have favourited a drink you invented, and it should not vanish from under them.
- Your favourites and ratings remain as rows attached to an account that no longer identifies anybody. They still count toward the totals on a drink.
So the honest description is that deleting your account removes everything that identifies you and keeps the anonymous remainder. If you want a published drink or a rating note taken down as well, email us and we will remove it.
Your rights
Depending on where you live you may have the right to see what we hold about you, correct it, have it deleted, or object to us holding it. Ask at [email protected] and we will answer. Since almost everything 1Pour knows about you never leaves your phone, the honest answer to "what do you have on me" is usually "an email address and a list of drinks you liked".
Children
1Pour is not for children. The app asks you to confirm you are of legal drinking age where you live before showing anything alcoholic, and answering no switches it to the zero-proof catalogue rather than locking you out. We do not knowingly hold data from anyone under the legal drinking age in their country. If you believe a child has an account, email us and we will remove it.
Security
Everything is served over HTTPS. Passwords are hashed and session tokens are stored hashed. Tokens are opaque and rotate when refreshed, so a stolen one stops working. No system is perfectly secure and we would rather say so than promise otherwise.
Changes
If this policy changes in a way that affects what we collect or who sees it, we will change the date at the top and say what changed. Small corrections happen without ceremony.