Privacy

Who keeps it

Distillation Lab is run from Indonesia by distillationsimulator.com. Questions about your data: info@distillationsimulator.com.

What is kept

As a guest only usage statistics are kept (below). While your page is open, your runs are held in the server's memory, and they are gone soon after you leave.

With an account the server keeps:

• your email address, when the account was made, and whether you have confirmed the email;
• your password as a salted hash, never the password itself;
• if you sign in with Google: Google's id for you and the email address Google gives;
• what you make: your runs, recipes, saved products and preferences (your units and packings of your own).

Usage statistics, for guests and accounts alike: which pages and features are used and when, the country (found on the server from your address, which is not kept), the kind of device and the browser, under the random id of your cookie. They are kept 90 days, then only as daily totals without any id. Deleting your account deletes its statistics too. Signed in, your own page (/me) shows you your own last 30 days from them.

What you write in "What did you miss?" (the top bar's Feedback, the account's dialog or your own page) is kept with the same random id, and with your account if you are signed in, for a year at most; deleting your account deletes it.

To run the server it writes what goes wrong to its log, kept for 14 days. It counts each address's requests for a few seconds in memory to keep floods off; that is not stored.

Cookies

One cookie is needed for the simulator to work: it says who you are, a guest for as long as your browser is open or your account for 30 days of use. While you sign in with Google, two more last a few minutes for that sign-in. There are no other cookies: none for advertising or tracking, the usage statistics use the same cookie's random id, and nothing is shared with other sites.

Why

To run the simulator for you and keep your work between visits: what you asked for when you made the account. Emails are sent only to confirm your address and to reset your password. The usage statistics: to see what is used and what is not, and improve the simulator.

Who else handles it

• Hetzner Online GmbH, whose server in the United States holds the data.
• Resend, Inc., whose servers in the United States send the two kinds of email.
• Google, only when you choose to sign in with Google.

Your data is not sold, and not shared with anyone else.

How long

An account's data is kept until you delete the account. Then it is deleted from the server at once, and from the backups within 30 days.

What you can do

• Download everything your account keeps: Account → Download your data.
• Delete your account and everything it keeps: Account → Delete the account.
• Ask about, correct or object to what is kept: write to the address above.
• Complain to a data protection authority: in the EU, the one in your country.