Privacy Policy
Summary
5PM NYC ("we") is an independent happy hour guide. We collect the minimum information needed to run the service, and we describe exactly what below. We do not sell your personal data.
What We Collect
Anonymous browsing
If you use 5pm.nyc or the mobile app without an account:
- Page views and clicks via Google Analytics 4 (anonymized IP)
- Advertising measurement via the Reddit conversion pixel, which helps us see how well our ads on Reddit perform. It may set cookies and report visit or conversion events to Reddit.
- Approximate location only if you grant geolocation permission, used to show nearby bars. Not stored on our servers.
- Favorites and preferences stored locally in your browser (localStorage). Not sent to our servers.
- Server logs from Netlify (our hosting provider) including IP address, user agent, and page requested, retained briefly for security and performance.
With an account
If you create an account, we additionally collect:
- Email address for authentication and important account notifications
- Username (public) for friend discovery and list attribution
- Display name and bio (optional, public)
- Profile photo (optional, public) if you upload one
- Authentication data: hashed password if you sign up with email, or a unique identifier from Google or Apple if you use third-party sign-in
- Favorites: which bars you have saved
- Lists and bar crawls you create, including names, descriptions, bars included, notes, and visibility settings (private-to-friends or public)
- Friend relationships: who you have sent or accepted friend requests with
- Activity timestamps: when you joined, last logged in, last activity
In the mobile app
If you use the iOS or Android app:
- Push notification token: a device identifier used to send you notifications. Stored on our servers and tied to your account.
- Device platform: iOS or Android, for compatibility purposes
- Crash logs and basic device info (via Apple/Google standard reporting) to debug issues
How We Use Your Information
| Data | Purpose |
|---|---|
| Sign in, password reset, account recovery, account-related notices | |
| Username, display name, bio, avatar | Show your profile to your friends or the public, depending on visibility |
| Favorites, lists, crawls | Provide the core features of the service |
| Friend graph | Determine which content of yours is visible to which other users |
| Push token | Send notifications about friend requests, shared lists, and other in-app activity |
| Analytics | Understand how the service is used and improve it |
| Geolocation | Show bars near you (used only at the time of your request, not stored) |
Who Can See Your Information
- Your username, profile name, bio, and avatar are visible to anyone who finds your profile, unless you mark your account as not discoverable in settings.
- Lists marked as "private" are visible only to users you have accepted as friends.
- Lists marked as "public" are visible to anyone, including non-users via shareable links.
- Favorites are visible only to your accepted friends.
- Email addresses are never shown to other users.
- Pending friend requests are visible only to the requester and recipient.
Third-Party Services We Use
| Service | What it does | Data shared |
|---|---|---|
| Supabase | Database and authentication | All account data |
| Netlify | Hosting and serverless functions | Page requests, IP addresses |
| Google Analytics 4 | Anonymous usage analytics | Page views, anonymized IP |
| Reddit Pixel | Measures how our ads on Reddit perform | Visit and conversion events |
| Google Maps | Map display and place data | Page interactions with the map |
| Sign in with Google | Optional third-party auth | Email and basic profile (if you use it) |
| Sign in with Apple | Optional third-party auth | Apple-issued identifier (Apple may relay emails) |
| Resend | Transactional email delivery | Email address and email content |
| Buttondown | Newsletter (only if you subscribe) | Email address |
| Formspree | Report Incorrect Info, Suggest Bar, feedback forms | Form contents you submit |
| Apple Push Notification Service | iOS push notifications | Device token, notification contents |
| Firebase Cloud Messaging | Android push notifications | Device token, notification contents |
We Do Not
- Sell your personal information to anyone
- Share your personal data with the bars listed on the service
- Use your data to train AI models
Data Retention
We keep your account data as long as your account exists. When you delete your account, we permanently delete all personally identifiable information within 30 days. Some data may remain in encrypted backups for up to 90 days before final deletion. Anonymized analytics data (with no link to your identity) may be retained indefinitely.
Your Rights
You have the right to:
- Access your data: download a copy by emailing privacy@5pm.nyc
- Correct inaccurate data: update your profile in account settings
- Delete your account: see Account Deletion
- Object to certain processing: contact us at the email above
- Withdraw consent for optional features (push notifications, geolocation): change device or browser settings
California residents (CCPA): you have additional rights including the right to opt out of any sale of personal information, though we do not sell personal information. EU residents (GDPR): the legal basis for processing your data is consent (you agree to these terms by creating an account) and legitimate interests (operating and improving the service).
Children
The Service is intended for adults of legal drinking age (21+ in New York). We do not knowingly collect information from anyone under 21. If you believe a minor has provided us information, contact us and we will delete it.
Security
We use industry-standard security including TLS encryption in transit, bcrypt password hashing, and access controls on our database. No system is completely secure; we cannot guarantee absolute security.
International Transfers
Our servers are located in the United States. If you use the Service from outside the US, your information will be transferred to and processed in the US.
Changes to This Policy
We may update this policy from time to time. Material changes will be communicated via email or in-app notice at least 7 days before taking effect.
Contact
Privacy questions or requests: privacy@5pm.nyc
By mail: 5PM NYC, 1178 Broadway, 3rd Floor #1414, New York, NY 10001