Privacy, cookies and terms
Who we are
Tap Tourist (taptourist.co.uk) is a little guide to craft beer in and around Manchester. It's run by Jason Mayo, a sole trader trading as ByMayo, in Manchester, UK. For anything on this page, including questions about your data, email [email protected].
Under UK data protection law (the UK GDPR and the Data Protection Act 2018), we are the "controller" of the personal data described below.
Privacy
You can use Tap Tourist without telling us who you are. There are no accounts, and we never sell your data or use it for advertising. We only collect personal data when you choose to give it to us, or when it's needed to keep the site running safely.
Browsing the site
Like every website, our servers and Cloudflare (which protects the site and delivers it quickly) see your IP address and basic details of your browser when you visit. This is used to deliver pages, keep the site secure and block abuse. It's kept for a short time in server and security logs, then deleted. Our lawful basis is our legitimate interest in running a secure website.
Counting visits (only if you say yes)
If you accept analytics in the cookie banner, we use Plausible (opens in a new tab) to count which pages are viewed and which links are clicked. Plausible sets no cookies, doesn't store your IP address and doesn't build a profile of you. We only see totals. If you don't accept, it never loads. Our lawful basis is your consent, and you can change your mind any time with "Cookie settings" at the bottom of every page.
Your location
If you give us a postcode, or let your browser share your location, we use it to sort places by distance and show who delivers to you.
If you type a postcode, it's kept in a cookie in your browser for one day.
If you choose "Use my current location", your browser sends your coordinates directly to postcodes.io (opens in a new tab), a free postcode lookup service. It finds your nearest postcode, and only that postcode is kept, in the same one-day cookie.
We never store your coordinates or your postcode on our servers. "Forget my location" removes the cookie straight away.
Suggesting a place
When you suggest a place, we keep what you tell us about it, plus your name, your email address and whether you run the place, if you give them. Your name and email are optional, and we only use your email to tell you when the place is added.
To stop spam:
the form is checked by Cloudflare Turnstile, which looks at your browser to tell people from bots;
we keep a scrambled (hashed) version of your IP address and your browser type, which lets us limit how many suggestions come from one connection.
Each suggestion is emailed to us through Mailgun, in the EU.
We delete suggestions 12 months after we've added or turned down the place. Our lawful basis is our legitimate interest in keeping the guide accurate and free of spam.
The newsletter
If you join the mailing list, we keep:
your email address;
the page you signed up on;
when you signed up;
a hashed version of your IP address, to stop abuse.
We only use your email to send you Tap Tourist news: new places, closures and the odd guide. We haven't sent a newsletter yet. When we start, we'll name the email service that sends it here, and it will only handle your address to deliver our emails.
You can unsubscribe any time from the link in any email, or by emailing us. We then keep a note that you unsubscribed, so you're never emailed again. Ask and we'll delete your address completely. Our lawful basis is your consent.
Cheers
When you press "Say cheers" on a place, we store a hashed version of your IP address with the date, so each connection can only cheer a place once a day. The hash can't be turned back into your IP address without our secret key, and it isn't linked to anything else about you. It's kept so the cheers count stays right. Our lawful basis is our legitimate interest in keeping the count fair.
Emailing us
If you email us, we keep the conversation for as long as we need it to help you, and for our records.
Who else handles your data
We use a few trusted services to run the site. Each only handles data to do its job for us:
DigitalOcean hosts our servers in London.
Cloudflare delivers and protects the site, and runs Turnstile on the suggestion form.
Mailgun (EU) sends us suggestion emails.
Plausible (EU) counts visits, only if you say yes.
postcodes.io (opens in a new tab) turns your location into a postcode, only if you ask it to.
Mapbox draws the map, only when you choose "Show map". Your browser fetches the map from Mapbox, which sees your IP address and browser like any website does, and counts each map load.
YouTube, Vimeo, Instagram and other sites show videos, posts and maps in our guides, only when you press the button on one. Until then nothing loads from them. Once you do, that site sees your IP address and browser and may set its own cookies, under its own privacy policy. YouTube videos play from its privacy-enhanced mode (youtube-nocookie.com (opens in a new tab)) and Vimeo's with tracking turned off.
WhatsApp, Facebook and X only hear from you if you use a guide's share buttons, which open their sites with the guide's link.
Some of these companies may handle data outside the UK. Where they do, it's protected by the safeguards UK law requires, such as the UK's adequacy regulations or standard contractual clauses. We'll never sell your data or share it with anyone for marketing.
Your rights
You have the right to:
ask for a copy of the personal data we hold about you;
have it corrected or deleted;
object to how we use it, or ask us to limit it;
withdraw your consent at any time.
Email [email protected] and we'll reply within a month. If you're unhappy with how we've handled your data, you can complain to the Information Commissioner's Office at ico.org.uk (opens in a new tab). We'd appreciate the chance to put it right first.
Cookies and browser storage
We use a handful of cookies and browser storage items, all to remember choices you've made. None of them track you across other sites. You can change your analytics choice any time with "Cookie settings" at the bottom of every page, or clear everything in your browser settings.
Cookies
tt\_consent remembers your cookie choices. Kept for 1 year.
userLocation holds the postcode you gave us, for distances. Kept for 1 day.
lightboxMailingList remembers that you closed the newsletter pop-up (kept 10 days) or joined (kept 1 year), so we don't ask again.
lightboxLocation remembers that we've asked for your location, so the location pop-up doesn't open again by itself. Kept 10 days.
Cloudflare may set a short-lived security cookie to tell people from bots. Turnstile works the same way on the suggestion form.
Browser storage
This stays on your device and is never sent to us:
recentlyViewed holds the places you've looked at, for the "Recently viewed" list. Kept until you clear it.
mailingListViews counts pages viewed this visit, so the newsletter pop-up waits a while. Cleared when you close the tab.
mailingListShownAt notes which page of your visit the newsletter pop-up appeared on, so the location pop-up waits a couple of pages after it. Cleared when you close the tab.
errorRetry stops a page that failed to load from retrying itself over and over. Cleared when you close the tab.
plausible\_ignore is set if you say no to analytics, so Plausible counts nothing. Kept until you change your choice.
If you open the map, Mapbox also keeps an anonymous ID in your browser (mapbox.eventData.uuid, with its date), which it sends with each map load so it can count them. It isn't linked to you. Kept until you clear it.
Plausible itself sets no cookies.
Terms of use
By using Tap Tourist you agree to these terms. They're short, we promise.
The guide
Tap Tourist is free, and it's for information only. We check every place regularly, but opening hours, beer lists, prices and whether a place is still open can change without notice. Please check with the place before you make a special trip.
We're not responsible for the places we list: the beer, the service, the welcome, or anything that happens while you're there.
Drink responsibly
Tap Tourist is meant for people aged 18 and over. Please drink responsibly, and never drink and drive. Drinkaware (opens in a new tab) has good, practical advice.
Listings
We choose which places are listed, and nobody pays to be on Tap Tourist. If you run a place and something's wrong, or you'd like it removed, get in touch.
What you send us
When you suggest a place, you're happy for us to use what you send to write and publish its listing. We may edit it, and we don't have to publish it. Please don't send anything you don't have the right to share, or anything unlawful or offensive.
Our content
The words on Tap Tourist are ours. Photos belong to the places or the photographers credited. You're welcome to link to us and share pages. Please don't copy the guide wholesale or reuse its content for commercial purposes without asking.
Other websites
We link to places' own websites, maps and social media. We don't control those sites and aren't responsible for them.
Liability
We do our best to keep Tap Tourist accurate and running, but we can't promise it will always be either. As far as the law allows, we're not liable for any loss that comes from using the site or relying on it. Nothing in these terms limits liability that can't be limited by law.
Changes and the law
We may update this page now and then. The date at the top says when it last changed. These terms are governed by the law of England and Wales, and its courts deal with any disputes.
