Last updated: September 9, 2026
This Privacy Policy explains how Proof and Smoke ("we," "us," or "our"), operated by Matt Andreola, collects, uses, and protects your information when you use the Proof and Smoke website and application (the "Service").
| Category | What it includes | Source |
|---|---|---|
| Account info | Email address, and name if you provide one or sign in with Google | You, or Google (if you use Google Sign-In) |
| Your app content | Cigars and spirits you add; ratings; tasting notes; wishlist and status data; your written "Palate" description | You |
| Basic usage data | Standard web server/hosting logs (e.g. via Netlify) such as IP address and request timestamps | Automatically, via our hosting provider |
We don't ask for or store payment card numbers, government ID numbers, or other sensitive financial information — we don't process any payments through the Service.
We use your information to: operate your account and let you sign in securely; store and display your cigar/spirit collection, ratings, and notes; generate pairing and "Discover" recommendations personalized to your taste profile; and maintain and improve the Service.
Your account and app data are stored using Supabase (database and authentication) and the Service is hosted on Netlify. We use Cloudflare Turnstile to screen for automated/bot signups. We use Sentry to monitor for errors, which may collect technical details when something breaks (e.g. your browser type, the page URL, and a stack trace) — not your account content or personal data beyond that. These are third-party infrastructure providers that process data on our behalf under their own security and privacy commitments; we don't independently sell or share your data with them for their own marketing purposes.
If you use the optional "Import from Order Email" feature, the text you paste is sent to Anthropic's Claude API to extract the items into your collection — it's processed for that single request and isn't stored by us afterward or used to train any model.
We use your browser's local storage to remember that you've confirmed you're of legal age (21+) so you're not asked again on every visit, and to remember which section of the app you last had open. We don't use third-party advertising cookies or tracking pixels. Cloudflare Turnstile (our signup bot-check) and Google Sign-In (if you use it) may each set their own limited cookies or local storage strictly to perform their own function — fraud/bot detection and authentication, respectively — not for advertising.
We do not sell your personal information. We may share limited information: with service providers who help operate the Service (Supabase, Netlify, Cloudflare Turnstile, Sentry, and Google if you use Google Sign-In); if required by law, subpoena, or legal process; or with your consent.
If you follow an affiliate or retailer link from the Service to make a purchase, that retailer's own privacy policy governs any information you provide to them — we don't pass your Proof and Smoke account data to them.
You can review and edit most of your data directly in the app at any time. You can request deletion of your account and all associated data using the "Delete Account" option in the app, or by emailing us at the address below. Deleting your account removes your collection, ratings, notes, and Palate data immediately; your login credentials are fully closed by us within 5 business days of your request.
We retain your account data for as long as your account is active. If you delete your account, we remove your app content immediately and close out your login within 5 business days, except where we're required to retain limited information for legal or security reasons.
The Service is intended for adults 21 years of age or older and is not directed to children. We don't knowingly collect information from anyone under 21. If we learn we've collected information from someone under the required age, we'll delete it.
We rely on industry-standard security practices provided by our infrastructure providers (Supabase, Netlify), including encrypted connections (HTTPS) and access controls that restrict your data to your own account. No method of transmission or storage is 100% secure, but we work to protect your information.
We may update this Privacy Policy from time to time. If we make material changes, we'll update the "Last updated" date above.
Questions about this Privacy Policy, or want to exercise your data rights? Email us at officialproofandsmoke@gmail.com.