The Wayfinder Cellar ("the app") is a personal spirits and wine collection tracker. It is operated by an individual ("the app owner") and shared on an invite-only basis with a small, trusted group of users.
The app owner is the data controller for all personal data processed by this app. If you have any questions about how your data is handled, contact hello@thewayfindercellar.co.uk.
When you create an account, we collect:
When you use the app, we store:
When you successfully add a bottle to your collection or wish list (including via CSV import) and that bottle has a barcode, we may record anonymised product details in a shared community product catalog. This catalog is used only to improve barcode lookup for everyone. It may include:
The published catalog entry that other users' scans may hit never stores who contributed it, and never includes tasting notes, ratings, quantities, valuations, acquisition details, or any indication that you own a particular bottle. Internally we retain a per-user sighting record (linked to your account) solely so the same person is not counted twice toward agreement thresholds and so admins can review conflicting product mappings — that record is not shown to other users as part of anyone's cellar.
Other users cannot browse your collection or see who contributed a catalog entry.
To run the AI features within the daily limits, we store:
Like all web apps, we may receive:
We use your data only to operate the app. Specifically:
Your collection and wish list data are stored in a Supabase database hosted in the EU (Ireland, eu-west-1 region). Row Level Security is enforced at the database level for those tables, which means each user can only access their own collection and wish list — even in the event of an application bug. The one deliberate exception is wish list sharing: if you create a share link, whoever redeems it can view the specific items covered by that link's scope until you revoke it or it expires — a feature you control, not a default, and it never extends to your collection. The community product catalog is a separate, shared product index (not per-user cellar data) and is not exposed as another user's private collection.
Your password is never stored. Supabase handles authentication using industry-standard bcrypt hashing.
Your profile photo (if uploaded) is stored in a Supabase storage bucket with access restricted to your account only.
All connections to the app are encrypted using HTTPS.
We keep your data for as long as your account is active. If you want your data deleted, contact privacy@thewayfindercellar.co.uk and it will be removed within a reasonable time.
The AI cache stores anonymised lookup results for up to 90 days (enrichment and scan results) or 14 days (valuations), after which they are automatically purged.
You have the right to:
If you are based in the UK or EU, you also have rights under UK GDPR and the Data Protection Act 2018, including the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.
The Wayfinder Cellar is not intended for use by anyone under the age of 18. We do not knowingly collect data from children.
If we make significant changes to this privacy policy, we will notify users via the app or by email. The "last updated" date at the top of this document will always reflect the most recent version.