1. Who we are
Vinarium is the controller for the personal data described in this policy — we decide why and how it is processed. Data-protection questions, and any request under the rights below, go to [email protected] and get an answer within 30 days.
Our registered legal name, company number and postal address are being finalised and will be published in this section as soon as they are. Until then, [email protected] reaches the controller directly.
2. What we collect
Account data (email, hashed sign-in tokens, plan), cellar content you create (bottles, reviews, lists, photos), and — only if you turn analytics on — lightweight usage data (page views, feature events) used to understand how Vinarium is used. We do not collect more than we need.
3. Why we are allowed to (legal basis)
Running your account and your cellar, including the AI features you invoke, is performance of our contract with you (Art. 6(1)(b) GDPR). Taking payment and keeping the accounting records that follow is a legal obligation and our contract with you (Art. 6(1)(c) and (b)). Keeping the service secure and available — rate limiting, abuse prevention, and crash reports carrying a stack trace and route but none of your content — is our legitimate interest in a service that stays up and is not abused (Art. 6(1)(f)); you can object to it at any time. Product analytics, and the browser storage they need, run on your consent alone (Art. 6(1)(a) GDPR and the ePrivacy rules on storing things on your device), and you may withdraw that consent at any time without affecting what was processed before you did.
4. Cookies, localStorage, and your analytics choice
We use first-party cookies and localStorage to keep you signed in, to remember UI preferences (currency, filters, theme), and to record the analytics choice you make below. Those are strictly necessary to deliver the service you asked for, so they are not consent-based. Product analytics are powered by PostHog (EU-hosted), reverse-proxied through our own domain so no PostHog cookies are set in your browser directly. We don't run advertising or marketing trackers. Analytics are off until you say yes: everyone, signed in or not, is asked by the cookie banner, and until you accept no analytics event is sent at all — not from your browser, and not from our servers, which read the same choice before recording anything. Creating an account or signing in is not consent and never switches them on. Turn them on or off whenever you like in Settings → Privacy; switching them off stops further events immediately and clears the stored analytics identifier. Crash reports are the one exception: they keep running either way so we can fix what breaks, and they carry a stack trace and route, never your content.
5. Third-party AI providers
Vinarium calls third-party AI providers (e.g. Anthropic, OpenAI, Opper) to power URL extraction, sommelier chat, and vintage enrichment. Prompt content relevant to those features is transmitted to the chosen provider for processing. We don't use your data to train models, and we choose providers that contractually commit to the same.
6. Where your data goes
Your account and cellar data are stored in the EU, and analytics are processed on PostHog's EU infrastructure. Some processors are established in the United States — Anthropic and OpenAI for the AI features, Stripe for payments — so using those features transfers personal data outside the EEA. Those transfers rely on the European Commission's Standard Contractual Clauses, together with the supplementary technical and organisational measures set out in each provider's data processing addendum, and on the EU–US Data Privacy Framework where the provider is certified under it. Email [email protected] for a copy of the clauses that apply to you.
7. How long we keep it
We keep account and cellar data for as long as you have an account. Analytics events are retained for up to 12 months. You can delete your account yourself from Settings → Danger zone: that erases your account, your tasting notes, tracked wines, lists, saved searches, sommelier chats and access tokens immediately, cancels any subscription and removes your billing customer record. Cellars you share with someone else survive and are handed to another member; cellars only you can reach are destroyed with every bottle in them. Stored label images are removed unless another member's bottle still uses the same file. Anything that has to be completed at a third-party processor is recorded and finished within 30 days, subject to legal record-keeping duties.
8. Your rights
You have the right to access your data, to have it corrected, to have it erased, to restrict how we process it, to object to processing we base on our legitimate interests, and to data portability. Two of those you can exercise yourself, right now: download everything we hold about you from Settings → Your data (access and portability, as machine-readable JSON), and delete your account from Settings → Danger zone (erasure, immediate). Withdraw analytics consent in Settings → Privacy. For correction, restriction, objection, or anything the in-app tools do not cover, email [email protected] and we will answer within 30 days. Giving us your data is not a statutory requirement, but we cannot run an account without an email address, and we do no automated decision-making or profiling that produces legal effects for you.
9. Sharing
We don't sell your data. We share it only with the processors that run the service for us (hosting, email delivery, payments, AI providers, and PostHog for analytics), and only as needed to deliver the feature you used.
10. Complaints
If you think we are handling your data wrongly, tell us first at [email protected] — we would rather fix it. You also have the right to complain to a supervisory authority: ours is the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, IMY), imy.se. You may equally complain to the authority in your own EU or EEA country of residence or place of work.
11. Changes
We may update this Privacy Policy over time. Continued use of Vinarium after a change means you accept the updated policy. We will surface significant changes in-app.