Privacy

Privacy

Dry100 holds information about drinking, which is personal. This page says what we keep and what we don't do. Last updated 25 October 2026.

If you don't make an account

Your date, label and spending estimate stay in your browser's local storage on your device. We never receive them. Clearing site data removes them.

If you make an account

We store your email address, a password hash (managed by our authentication service), your start dates, the stretches and optional notes you add, check-ins (mood and optional note), your circle (names you type, optional email addresses, what each person may see) and kind words sent to you. Notes and check-in notes are encrypted by Dry100 before they're saved, so a copy of the database alone doesn't expose them.

Who can see what

• Only you can see your notes, moods, restarts and history.
• Each supporter sees your day count and only the extras you tick for them, on a page that needs their private link. Their page isn't indexed by search engines.
• We don't read your notes. Operating the service means a person with database access could see unencrypted fields (dates, names, settings) if they needed to fix a fault.

What we don't do

• No advertising, no ad networks, no data sales, no profiling.
• No third-party analytics or tracking scripts on the site.
• We don't share health information with anyone for their own purposes.

Services that process data for us

• Helm7 hosts the site, database and sign-in (EU data centre).
• Stripe handles payments. We store only a customer and subscription reference, not card details.
• ThreadCamp sends the emails you ask for: password resets, supporter links, reminders.
• Sentry receives error reports. We strip request bodies, cookies, query strings and identity before they leave, and we never send notes. If you press “send feedback,” what you type goes to Sentry.

Cookies and storage

Only what the site needs: a sign-in session cookie, a small “signed in” hint cookie, and local storage for the on-device counter. None are used for tracking.

Your controls

• Download your data (CSV or JSON) from Account, any plan.
• Delete your account from Account. It removes your data and cancels any subscription. Backups age out within a short period.
• Remove a supporter and their link stops working immediately. Their email address is deleted.

If something goes wrong

If personal information were exposed, we'd tell affected people without delay and say what happened, in line with applicable breach-notification rules.

Contact

Write to our contact address (shown once the page loads).