Privacy Policy
Last updated 17 October 2026
Discretion Underground runs this website and the Discretion Underground apps for iOS and Android. This page sets out what we collect, what never leaves your device, and who else is involved.
We do not sell your data and we do not use it for advertising. Everything the apps send to us travels over HTTPS.
This Website
What we collect
- Page views, through Umami — a self-hosted, cookieless analytics tool. It records the page visited, the referring site and general device type. It sets no cookies and does not follow you across other sites.
- Nothing else. This site has no comments, no accounts, no logins, no newsletter signup and no contact forms.
A few small notes stay in your own browser and are never sent to us: that you have already come through the door this visit, your progress in the games, and which events you added to your calendar (forgotten once each event is over).
Server logs
Our hosting provider keeps the ordinary web-server access logs needed to deliver and secure the site. Those are held by the host under its own terms; we do not mine them.
The Mobile Apps
iOS and Android
Sent to our server
- Push notification token — issued by Apple Push Notification service on iOS or Firebase Cloud Messaging on Android, and used only to deliver notifications to your device. The two platforms differ, so we will be plain about it: on iOS the token is created and sent only if you allow notifications. On Android the system issues the token whether or not you allow them — the permission governs whether notifications are shown, not whether the token exists — so the app sends it either way. If you would rather we did not hold yours, email us and we will delete it.
- Device identifier — used to tie your token to your device, so that when your token is reissued we update your existing entry instead of adding a duplicate. On iOS this is a random identifier the app generates for itself and stores in the device Keychain; it is not Apple's advertising identifier and not the vendor identifier, and it is not shared with any other app. On Android it is the Android ID.
- Platform — the word “ios” or “android”, so notifications route through the right delivery service.
- Notification topics — which kinds of notification you chose in the app (Events, New on the bar, Hours & closures), stored with your token so we send you only those. All three are on until you turn one off. General announcements still reach every device.
That is the entirety of what the apps transmit to us. We do not collect your name, email address, phone number, location, contacts, photos or payment details through the apps, and neither app requests location permission.
Stays on your device
- Cached content — menu, events, hours and venue information, stored so the app works offline. It comes from our server and contains nothing about you.
- Notification inbox — notifications you have received, kept so you can read them later. Delete them individually or clear them all from inside the app.
- Favorites — cocktails you mark as favorites. These are never sent to us.
- Calendar marks — which events you added to your calendar from the app, so each one keeps its seal. Never sent to us, and forgotten once the event is over. The app never reads your calendar.
Deleting the app removes all of the above. One exception worth naming: on iOS the random device identifier is held in the Keychain, which the system deliberately preserves across a delete and reinstall — so reinstalling reuses the same identifier rather than issuing a new one. Email us and we will delete it from our server.
Third-Party Services
Notification delivery
- Apple Push Notification service (iOS) and Firebase Cloud Messaging (Android) carry the notifications. Each may process device and app identifiers under its own privacy policy.
In the Android app
- Google Maps SDK draws the venue map on the Info screen. The app does not hold a location permission and neither requests nor transmits your device's location.
No analytics, no crash reporting
Neither app contains an analytics or crash-reporting service. How you use the apps is not measured, recorded or sent anywhere. The iOS app bundles no third-party software at all; on iOS the system's own MetricKit may hand the app diagnostic summaries, and those are written to the device's local log and never transmitted to us.
Your Choices
Push notifications
Notifications are optional. Turn them on or off at any time in your device settings or inside the app. If you turn them off we keep your token on file but send you nothing — or ask us to delete it.
Deleting your data
To have your push token and its device identifier removed from our server, email [email protected]. Local app data is removed when you uninstall.
Age
Discretion Underground is a bar. This site and the apps are intended for adults and are not directed at children.
Changes & contact
If this policy changes, the date at the top of this page changes with it. Questions are welcome at [email protected].