Legal
Privacy Notice
This is a pre-launch website. There is no My Wine Shelf app yet, no account to create and nothing to log into. The personal data we process is the email address you choose to give us, the record of the consent you gave when you gave it, and a handful of technical fields stored on the same row: which page you signed up from, where you arrived from, your language preference, and a one-way hash of your IP address used only to rate-limit the form. The full list is in section 2. We never sell any of it, and you can have it deleted at any time by emailing us.
1. Who We Are
My Wine Shelf is a project of Nisshagen Advisory AB (Org.nr 559526-6742), a company registered in Stockholm, Sweden. We are the data controller for personal data collected through the mywineshelf.com website.
Contact us at hello@mywineshelf.com for any privacy-related question, including data subject requests under the GDPR.
This notice covers the website only. If and when a My Wine Shelf app is released, it will have its own privacy notice covering the data that app processes, and this one will be updated or replaced before that happens.
2. What Data We Collect
Only what the signup form sends, plus the minimum needed to keep that form from being abused. This is the complete list of what a signup stores. There is nothing else on the row.
| Data | Why we collect it | Where it's stored |
|---|---|---|
| Email address | To contact you about My Wine Shelf, and to count how many people want it built. Nothing else. | Supabase (EU) |
| App identifier | The fixed value wine_shelf. One signup service serves several "my … shelf" pages, so each row records which page it came from. | Supabase (EU) |
| Consent flag | A yes/no record that you ticked the consent box, so we can demonstrate a lawful basis as the GDPR requires | Supabase (EU) |
| Consent wording | The exact sentence you agreed to, stored word for word, so it is clear later what you actually consented to | Supabase (EU) |
| Date and time of signup | The moment you signed up and gave consent, recorded automatically, so we can show that consent was given and when. Required under GDPR Article 7(1). | Supabase (EU) |
| Page address | The address of the page you signed up from, so we know which page produced the signup | Supabase (EU) |
| Referring site | The site you followed a link from, if any, so we can tell where genuine interest is coming from | Supabase (EU) |
| Language preference | A short language code such as en-GB, so we know which language to write to you in if the app is ever released | Supabase (EU) |
| Hashed IP address | Not your IP address. A salted SHA-256 hash of it, cut to 32 characters and stored on the row. It exists for one purpose: to cap signups at five per hour from the same network. It cannot be turned back into an IP address, and we do not store the address itself. It is still data derived from you, so we treat it as personal data and delete it with the rest of your row. | Supabase (EU) |
We do not ask for your name, your postal address, your date of birth, your cellar or your payment details, because this site does nothing that would need them. There is no account, no login and no app data, because there is no app. The signup form asks you to confirm you are of legal drinking age; that confirmation is a tick made on the page and is not stored. Nothing identifying the software or hardware you signed up from is recorded.
The website uses Vercel Web Analytics for aggregate, anonymous traffic measurement (page views, referrers, country-level location). It is cookieless, does not track individuals across sessions or sites, and does not build user profiles. The website sets no cookies of its own and uses no advertising or tracking pixels. If that changes, we will update this notice before it takes effect.
3. Legal Basis for Processing
We process your personal data under the following legal bases as defined by the GDPR:
- Consent (Art. 6(1)(a)): storing your email address and writing to you about My Wine Shelf. This is why the consent box is unticked by default and why the form refuses to submit without it. You may withdraw consent at any time; withdrawal does not affect processing carried out before you withdrew.
- Legitimate interests (Art. 6(1)(f)): storing a salted, irreversible hash of your IP address alongside your signup so the form can be rate-limited and kept from being flooded by bots, and basic error monitoring so the site keeps working. The hash is kept for as long as the row is kept, and is deleted with it.
4. Third-Party Services
We use two:
- Supabase: database and the server function that receives the form, hosted in the EU
- Vercel: website hosting and cookieless aggregate analytics
Fonts are served by Google Fonts, which means your browser makes a request to Google's font servers and Google receives your IP address as a technical consequence of that request. We send no other information to them.
We do not sell your data to any third party, and none of these providers use it for advertising.
5. How Long We Keep Your Data
We keep your email address and consent record until whichever of these comes first:
- You ask us to delete it, or unsubscribe from a message we send
- We decide not to build My Wine Shelf, in which case we tell you and then delete the list
- Twenty-four months pass from your signup without the app being released
Deletion happens within 30 days of the trigger.
6. Your Rights Under GDPR
As a user in the European Economic Area, you have the right to:
- Access: request a copy of the data we hold about you
- Rectification: ask us to correct an inaccurate address
- Erasure: ask us to delete your address and consent record
- Portability: request your data in a portable format
- Restriction and objection: ask us to stop or limit processing
- Withdraw consent: at any time, with no reason given and no effect on you
To exercise any of these rights, contact us at hello@mywineshelf.com. We will respond within 30 days. You also have the right to lodge a complaint with the Swedish Authority for Privacy Protection (IMY) or with the supervisory authority in your own country.
7. Removing Yourself From the List
Email hello@mywineshelf.com and say so. No form, no reason needed. That is the only removal route today, because no mail has been sent to this list and no mailing system is set up yet. If and when we do start sending, every message will carry an unsubscribe link. Removal deletes the address rather than suppressing it.
8. Age
My Wine Shelf concerns alcoholic beverages and is intended for adults of legal drinking age in their country of residence. The signup form asks you to confirm this before it will accept your address. We do not knowingly collect data from anyone below that age. If you believe a minor has given us an address, tell us and we will delete it.
9. Changes to This Notice
If we make material changes we will update the version number and effective date at the top of this page, and (where the change affects data we already hold about you) tell you by email before it takes effect.
10. Contact
Questions or concerns about your privacy? Contact us at hello@mywineshelf.com.
Nisshagen Advisory AB, Stockholm, Sweden.