Privacy Policy

1. Data Controller

Cellarya is published as a personal project. For any question regarding the protection of your data, contact us at contact@cellarya.com.

2. Data Collected

We collect only the data necessary for the operation of the service:

  • Account data: email address, registration date, subscription plan.
  • Cellar data: bottle inventory (appellation, vintage, quantity, notes), ageing preferences.
  • Usage data: connection logs retained by Supabase for security purposes.
  • Anonymous audience measurement: page views, traffic source and country, for statistical purposes. No cookies: unique visitors are identified by an anonymous identifier recalculated daily, without storing your IP address. This data cannot identify you personally.

We do not use any advertising cookies, third-party profiling trackers, or payment information.

3. Purposes of Processing

Your data is processed to:

  • Allow you to access your account and use the service
  • Send you transactional emails (registration confirmation, password reset)
  • Generate AI advice and purchase recommendations based on your inventory

Your data is never sold, shared, or used for advertising purposes.

4. Sub-processors

We use the following service providers to operate the service:

  • Supabase — database and authentication (hosted in Europe)
  • Vercel — web application hosting
  • Resend — transactional email delivery
  • Anthropic — AI processing for label scanning, sommelier advice, purchase recommendations, and value estimates. Data transmitted to Anthropic is not used to train their models.

5. Retention Period

Your data is retained for as long as your account is active. Upon account deletion, all personal data is deleted within 30 days, unless otherwise required by law.

6. Your Rights (GDPR)

In accordance with the General Data Protection Regulation (GDPR), you have the following rights:

  • Right of access — view your data from your account page
  • Right to portability — export your data in CSV format
  • Right to erasure — delete your account and all associated data
  • Right to rectification — modify your data at any time

These rights can be exercised directly from your account page or by email at contact@cellarya.com.

You also have the right to lodge a complaint with your national data protection authority if you believe your rights are not being respected.

7. Cookies

This site only uses cookies strictly necessary for authentication (Supabase session). No advertising or tracking cookies are used.

Last updated: June 2025