Privacy Policy

Effective July 5, 2026 · bbq.fan

The short version

BRS scores barbecue, not people. We collect the minimum we need to run a trustworthy rating system: a hashed version of your phone number to keep accounts honest, the ratings and photos you choose to share, and the location you share when you check in at a joint. We don't run ads, we don't use third-party trackers, and we never sell your data.

What we collect

• Phone number. Sign-in is by text-message code. We do not store your phone number in readable form — it is one-way hashed (with a server-side secret) the moment it reaches us, and the hash is what identifies your account. Verification codes are also stored only as hashes and expire after 10 minutes.
• Profile. The handle you pick and, if you set one, your home region. Your handle appears publicly next to your reviews.
• Your content. Ratings, reviews, and photos you submit. These are the point of BRS and are displayed publicly with your handle.
• Check-in location. When you check in at a joint, we record the coordinates and accuracy your device reports at that moment. We use it to verify you were really there — presence is what makes BRS scores trustworthy. We do not track your location in the background or keep a history of your movements beyond your check-ins.
• Technical basics. Standard server logs (IP address, browser type, timestamps) kept briefly for security and debugging.

How we use it

• Signing you in and keeping one account per person.
• Computing joint scores and your reviewer trust weight.
• Detecting fraud and rating manipulation.
• Showing you joints near you when you ask us to.
• Operating, debugging, and improving the service.

Text messages

We text you a one-time code when you sign in — nothing else. Messages are delivered by Twilio, which processes your phone number for that purpose. Message and data rates may apply.

Cookies

We use only essential session cookies: a short-lived one (15 minutes) and a refresh cookie (30 days) that keep you signed in. No advertising or analytics cookies, no third-party trackers.

Who we share with

Service providers who host and operate BRS on our behalf — Microsoft Azure (hosting and database) and Twilio (SMS delivery) — under their own confidentiality obligations. Beyond that, only if the law requires it or to protect the service and its users. We never sell or rent your information.

Retention and deletion

We keep your account data while your account is active. Ask us at support@bbq.fan and we'll delete your account; your reviews and photos are removed or de-identified, though their already-computed effect on historical joint scores may persist in aggregate.

Your choices

• You can use the public site without an account at all.
• Location sharing is up to your device permissions — without it you can still browse, but check-ins can't be verified.
• You can request a copy or deletion of your data any time at support@bbq.fan.

Children

BRS is not directed to children under 13, and we don't knowingly collect their information.

Changes

If we change this policy, we'll update this page and the effective date above. Material changes get a notice on the site.

Contact

support@bbq.fan · See also our Terms of Service.