Privacy Policy

This is an English translation provided for convenience. The Spanish version is the legally binding one.

Last updated: octubre 28, 2026

This page explains what personal data we process on Hacer Cerveza Casera, for what purposes, for how long and what rights you have. We do so in accordance with Regulation (EU) 2016/679, the General Data Protection Regulation (GDPR), and Spanish Organic Law 3/2018 on the Protection of Personal Data and Guarantee of Digital Rights (LOPDGDD).

Data controller

What data we process and why

Processing Data Legal basis Retention
Your account: creating it, letting you log in and saving your style passport and your shopping list. Username, email, encrypted password, marked styles, checked-off beers, marked products and the date you accepted this policy. And, if you use them, your batch logs (name, gravities and dates). Your consent and the performance of the service you request (Art. 6(1)(a) and 6(1)(b) GDPR). For as long as you keep the account. If you delete it from “My account”, the data is erased immediately.
Contacts: letting you add friends and compare beers, styles and achievements with them, and how you are doing in the game Levadura Survivor. Your display name, the beers you have checked off, the styles you have marked and your achievements (which your contacts can see), your list of contacts and requests, and your invitation code. And, if you play with your account, a summary of your progress in the game that your contacts see in their “Friends” tab (strains collected, stars, games, wins, true endings, best time, the strain you play most and when you last played), unless you hide it in that same tab. Your consent (Art. 6(1)(a) GDPR), which you give when you share your invitation link, accept an invitation, or send or accept a request. Until you remove the contact or delete your account. When you delete it, you are also removed from your contacts’ lists.
Discord (optional): connecting your account to the community’s Discord server so it can assign you roles based on your beers and achievements. Your Discord ID and username, the permission you grant us on Discord to update that data, and the number of checked-off beers and achievements, which we send to Discord together with your display name. Your consent (Art. 6(1)(a) GDPR), which you give when you click “Connect Discord” and authorize it on Discord. Until you disconnect it in “My account” or delete your account: we then delete your Discord ID and revoke the permission.
Levadura Survivor game: saving your progress so you can keep playing on any device and, only if you agree, showing you in the weekly challenge leaderboard. Your progress in the game (bottle caps, strains, lab upgrades, records and any game in progress) and the game’s achievements. If you play the challenge and agree to appear in the leaderboard, your display name and your best game of the week (time, contaminants eliminated, level and whether you won). The first game can be played without an account: it is then saved only in your browser and moves to your account when you log in. Performance of the service you request (Art. 6(1)(b) GDPR) to save your progress. Your consent (Art. 6(1)(a) GDPR) for the leaderboard, which you give in the game before sending your first challenge game. Your progress, for as long as you keep the account. Your best challenge game, until it is replaced by another week’s, you withdraw your consent on the challenge screen (we remove it immediately) or you delete your account.
Game statistics: counting how many games are played, with which strains, in which setting and at what minute they end, and which screens and settings are used, to improve the game. Daily counters, without cookies or personal data. To prevent abuse, an encrypted fingerprint of your IP address is calculated; it changes every day and does not reveal who you are. Legitimate interest in knowing how the game is used (Art. 6(1)(f) GDPR). Counters: 120 days. The fingerprint: one day.
Game bug reports: letting you tell us from Levadura Survivor about something that went wrong, so we can fix it. What you write (up to 1,500 characters) and the game version. If you leave the technical data box checked, also your browser, your screen size, your language, whether you have an account, how many games you have played and the strain and setting you chose. If you send it while logged in, it is linked to your account. We do not store your IP address: to limit reports to five a day, we use the same encrypted fingerprint that changes every day. We receive an email notification with what you wrote. Your consent (Art. 6(1)(a) GDPR), which you give by sending it. Technical data is only sent if you leave its box checked. Until we review it and, at most, one year: after that it is deleted automatically. If you delete your account, the reports you sent with it are deleted too.
Service emails: welcome, password recovery and notifications about your activity with your contacts (when someone asks to be your contact or accepts your request, and when someone challenges you, accepts your challenge or a challenge ends). Username, email and the display name of the contact we are notifying you about. Performance of the service (Art. 6(1)(b) GDPR). You can turn off contact and challenge notifications at any time with the checkbox in your profile in “My account”. For as long as the account exists.
Newsletter: sending you one email a week with the site’s guides and news. Your email address and the date you confirmed your subscription. Your consent (Art. 6(1)(a) GDPR), which you give by checking the box and confirming from the email we send you. Until you unsubscribe, using the link included in every email or by writing to us. If you don’t confirm, your email address is deleted after 7 days.
Inquiries you send us by email. Whatever you give us: name, email and the message. Your consent (Art. 6(1)(a) GDPR). The time needed to reply to you and, after that, up to one year.
Website security: stopping attacks and unauthorized access. IP address, browser and access logs. Legitimate interest in protecting the website (Art. 6(1)(f) GDPR). Up to 30 days, unless needed to investigate an incident.
Visitor statistics with Google Analytics 4, only if you accept analytics cookies: knowing how many people visit the website and which pages they read most. Pseudonymized browsing data: pages viewed, device, browser, approximate country or city and a cookie identifier. Google Analytics 4 does not store the IP address. Your consent (Art. 6(1)(a) GDPR and Art. 22 of Spanish Law 34/2002 on Information Society Services and Electronic Commerce, LSSI-CE), which you can withdraw at any time with “Manage cookies”. Cookies: up to 2 years. Data in Google Analytics: the period configured in the tool, 14 months at most.
Cookieless statistics with Cloudflare Web Analytics: counting visits and measuring how fast the website loads. Page visited, the website you came from, browser, approximate country and load times. It does not use cookies or identify anyone. Legitimate interest in knowing what is read and in keeping the website fast (Art. 6(1)(f) GDPR). The period Cloudflare applies to this data.
Cookie consent. Your preferences, stored in your browser. Legal obligation (Art. 22 LSSI-CE). As stated in the cookie policy.

We do not make automated decisions or carry out profiling. We do not sell your data. We do not process data of anyone under 18: if you are under 18, do not create an account.

Who else sees your data

We do not disclose your data to third parties unless legally required to. To run the website we use providers that process it on our behalf, under a data processing agreement:

Your contacts. If you add contacts, the people you accept (or who accept your invitation) see your display name, the beers you have checked off, the styles you have marked and your achievements, and in the game Levadura Survivor the summary of how you are doing (never your bottle caps or your game in progress; you can hide it in the game’s “Friends” tab). No one else sees them: not other users and not search engines. You can remove a contact at any time from “My account” › Contacts, and they will stop seeing them immediately. When someone asks to be your contact or challenges you, we send them an email with your display name to notify them; we never give them your email address.

Discord. If you connect your Discord account, we send Discord Inc. (United States) your display name, the number of beers you have checked off and the number of achievements earned. They are shown on your Discord profile and are used to give you the rank roles on the community server. And if you use the batch log, each batch’s name, gravities and dates are also posted in its thread in the server’s #mis-lotes channel, which the rest of the community can see. Discord processes this data as an independent controller, under its own privacy policy. Anything you write on the Discord server stays on Discord, not on this website.

Weekly challenge leaderboard. If you agree to appear in the leaderboard in the game Levadura Survivor, your display name and your best game of the week (time, contaminants eliminated, level and whether you won) are shown in the game, which anyone can open, and on the community’s Discord server when someone uses the /reto command. You can stop appearing at any time from the challenge screen, and your game is removed immediately. You can change your display name in “My account”.

If you click an Amazon link and make a purchase, Amazon processes your data as an independent controller, under its own privacy policy. We do not receive your personal data from those purchases.

Your rights

You may exercise your rights of access, rectification, erasure, objection, restriction of processing and portability at any time, and withdraw your consent. Many of them are right at hand in My account: there you can view and change your data or delete your account. For anything else, write to info@hacercervezacasera.com stating which right you are exercising.

If you believe we have not handled your data properly, you can file a complaint with the Spanish Data Protection Agency (AEPD) (www.aepd.es).

Security

The website runs over HTTPS only, passwords are stored encrypted and we never see them, and we apply technical measures to prevent unauthorized access.

Changes to this policy

If we change anything important, you will see it here with the date of the update. If the change affects how we use your account data, we will notify you by email.