Privacy policy
Last updated: October 2026
Who is responsible?
The operator of storvin.app is responsible for the processing of your data, see the imprint.
What data we store
- Account: name, e-mail address and your password (only as a hash, never in plain text), language.
- Your cellar: wines and bottles, photos, locations, racks, searches, settings and drinking history. This data is yours and visible only to you.
- Registration: until you enter the code from the e-mail, your details wait for at most 10 minutes in a separate collection and are then deleted automatically. The same applies to a “forgot password” request.
- Technical data: to protect the service from overload, the server briefly keeps in memory how often an address makes requests. This is not stored permanently.
Cookies
We only set technically necessary cookies. They need no consent. There are no advertising or analytics cookies and no third-party services on our pages.
- sid (session cookie): keeps you signed in. Without it sign-in does not work. It is only sent over HTTPS, invisible to scripts and expires when your session ends.
- lang: remembers your language preference (German or English).
What we use the data for
Only to run the service: sign you in, show your cellar, send you e-mails with codes and a welcome e-mail. We do not sell data and do not pass it on for advertising. The legal basis is the performance of the contract (Art. 6(1)(b) GDPR) and our interest in secure operation (point (f)).
E-mails are sent through an e-mail provider (planned: Amazon SES). AI features, if you use them, send the details they need to the respective AI provider.
Your rights
You can ask at any time for access to, correction, deletion, restriction and a copy of your data, and you can object to the processing. You can export your cellar in the settings. Write to us from the e-mail address of your account. You can also complain to a data protection authority.
How long we keep data
As long as your account exists. When you have the account deleted, we delete your cellar, photos and account data.