Privacy Policy

Sip n' Log — Last updated: 2026-06-01

1. Data Controller and Data Collected

Sip n' Log (contact: contact@sipnlog.com) is the data controller. We collect your email address, display name, avatar, tasting notes (including blind sessions), and associated photos. We do not sell your data to third parties.

2. How We Use Your Data

Your data is used solely to provide the Sip n' Log service: storing tastings, enabling social sharing with friends you approve, and improving the app experience.

3. Data Sharing and Sub-processors

Your tastings are private by default. You control visibility (private, friends, public). We use Supabase (data infrastructure, EU servers) and Vercel (web hosting) as GDPR-compliant sub-processors. No data is shared with other third parties without your consent.

4. Storage and Security

Data is stored securely with encryption at rest and in transit. We use row-level security policies (RLS) and industry-standard practices to protect your data.

5. Data Retention

Your data is retained as long as your account is active. Upon account deletion, all your data is permanently erased within 30 days. Technical log data is retained for a maximum of 90 days.

6. Your Rights (GDPR Art. 15–22)

You have the right to access, rectify, erase, restrict, object to the processing of, and export (portability) your data. Use the "Export my data" button in Settings or contact us at contact@sipnlog.com.

7. Legal Basis for Processing

Processing is based on contract performance for essential features, and on your consent for social features and sharing. You may withdraw consent at any time by deleting your account.

8. Account Deletion

You can delete your account at any time from Settings. This permanently deletes all your data: tastings, photos, friendships, and profile information.

9. Contact and Supervisory Authority

For any privacy question, contact us at contact@sipnlog.com. You also have the right to lodge a complaint with the data protection authority in your country (e.g., ICO in the UK, CNIL in France, AEPD in Spain, ANPD in Brazil).