Privacy Policy
How VINBLIK collects and protects your data.
This policy explains what data VINBLIK collects when you use our website and mobile application, how we use it, and what rights you have.
1. Data We Collect
Account data (email, name), profile data, your cellar contents, app activity, and merchant event participation data.
2. How We Use Data
To provide authentication, cellar tracking, event features, account security, customer support, and product improvements.
3. Legal Bases
Where applicable under GDPR, we process data based on contract performance, legitimate interests, legal obligations, or your consent.
4. Sharing
We share data with service providers needed to run the service (for example, Supabase for authentication and database hosting). We do not sell personal data.
5. Retention
We retain data as long as needed for service operation, compliance, and dispute resolution, unless a longer period is legally required.
6. Your Rights
Depending on your region, you may request access, correction, deletion, or export of your personal data.
7. Children
The service is not intended for users below the applicable legal age requirement for alcohol-related content in their jurisdiction.
8. Security
We apply reasonable technical and organisational measures, but no system is completely risk-free.
9. Cookies & Local Storage
The website uses no advertising or analytics cookies and no third-party tracking, which is why no cookie consent banner is shown. What we store on your device is strictly necessary to deliver the service you ask for, and it lives in your browser's local storage rather than in cookies: your login session (so you stay signed in), your age verification answer, your language preference, and small cache and display states (for example cached data versions and dismissed notices). Two strictly necessary exceptions do involve third parties. When you reach the payment step, our payment processor Stripe loads its own script and sets cookies used to detect fraud; this happens only on pages where you are paying. When you create an account, Cloudflare Turnstile runs a bot check. Both are required for the service to work safely and neither is used for advertising. Some pages also load map tiles from OpenStreetMap and historical weather data from Open-Meteo, which means those providers see your IP address, as any website you visit does. Nothing we store is used for tracking or marketing or sold to anyone, and it stays on your device until you log out, clear your browser data, or it expires. If we ever add analytics or marketing tools that require consent, we will ask you first and they will stay switched off until you agree.
10. AI Features & Automated Processing
Some VINBLIK features are powered by artificial intelligence — the in-app and website AI assistant, and wine-label scanning. When you use these features, the text or image you provide is sent to third-party AI providers (OpenAI and Google) so they can generate a result for you. Your inputs and the resulting queries are retained only in anonymised, aggregate form to monitor quality and improve the features; they are not used to identify you.
11. Account Deletion
You can delete your account at any time. When you do, your personal records — profile, cellar, wishlist, reviews and other data linked to you — are erased. Anonymised analytics and AI-interaction logs may be retained in aggregate form, permanently unlinked from you or your device, as they no longer constitute personal data.
12. Contact
For privacy requests, contact privacy@vinblik.dk.