Effective 24 August 2026 · Version 2026-08-24
Privacy Policy
Your cellar is a personal thing, and we treat it that way. This page sets out exactly what we collect, why we hold it, the handful of companies that process it on our behalf, and how to get it all deleted.
The short version. We collect what the app needs to work and nothing for advertising. We do not sell your personal information. We do not run ad trackers. Bottle photos you scan are sent to our AI provider to read the label. You can delete your account and everything in it by emailing us.
1. Who we are
Cellar Dash, LLC is the controller of the personal information described here. Contact us at support@cellar-dash.com.
2. What we collect
| Category | What it includes | Why |
|---|---|---|
| Account | Email address; sign-in timestamps. | To create your account and send the sign-in link. We use passwordless email sign-in, so we hold no password. |
| Age verification | Date of birth, country, and when you confirmed them. | To confirm you are of legal drinking age, and to record that we checked. |
| Profile | Display name, currency, units, time zone, and optional taste preferences such as regions, producers, and budget range. | To personalise the app and AI suggestions. All optional. |
| Your collection | Bottles and their producer, name, vintage, quantity, location, cost, estimated value, ratings, tasting notes, wishlist, and what you have opened or drunk. | This is the service. It is your record, stored so you can get it back. |
| Images | Label photographs and any pictures you attach to a bottle or a drink memory. | To identify bottles and to show them back to you. Your uploads are stored in a private bucket, not a public one. |
| Billing | Subscription status, plan, renewal date, and an identifier from our payment processor. | To know whether your plan is active. We never receive or store your card number — Stripe handles it. |
| Support and feedback | What you write in the feedback form, whether you marked it a problem or a request, and — if the picture is taken successfully — an image of your screen at that moment, including anything you draw on it. Sent with it: the page you were on, your screen size, your browser, and which version of the app you were running. | To see what you saw and fix it. The picture is taken only when you press the feedback button, it is shown to you before anything is sent, and you can send the message without it. Because it is a picture of your screen, it will contain whatever was on it — usually part of your collection. |
| Usage | Counts of AI actions, tokens consumed, and credits spent; server logs including IP address and request times. | To apply your credit allowance, control costs, and diagnose faults and abuse. |
We do not ask for your address, phone number, or government identification, and we do not collect precise device location.
3. Who processes it for us
We keep this list short on purpose. Each of these is a service provider acting on our instructions, not a company we sell data to.
| Provider | What it handles |
|---|---|
| Supabase | Account sign-in, the database holding your collection, and private image storage. |
| OpenAI | The AI features. Label photos and the text of your request are sent for processing — see section 4. |
| Google Programmable Search | Finding a stock photograph of a bottle. We send the bottle's name, never your personal information. |
| Stripe | Payments, subscriptions, and the billing portal. Stripe collects your card and billing details directly under its own privacy policy. |
| Resend | Delivering the feedback you send to our support address, including any screenshot attached to it. |
| Render | Hosting the application and its server logs. |
These providers process data in the United States. If you use Cellar Dash from outside the US, your information will be transferred there.
We may also disclose information if the law requires it, to protect our rights or someone's safety, or to a successor if the business is sold — in which case we will say so before your information becomes subject to a different policy.
4. How AI processing works
When you scan a label, generate a tasting profile, refresh a value, or ask for a pairing, the relevant content — the photograph, and details of the bottle in question — is sent to OpenAI to produce the result.
- We send only what the feature needs. Your email, date of birth, and billing details are never part of an AI request.
- We use OpenAI's API on terms under which submitted content is not used to train their models.
- We keep a record of how many tokens each request used, so we can meter credits and understand cost. That record holds counts, not the content of your request.
If you would rather no photograph left our systems, do not use the label-scan or image features; the rest of the app works without them.
5. Storage on your device
Cellar Dash stores a sign-in token in your browser so you stay logged in, and caches app files so it loads quickly and works offline. That is what these are for — not tracking.
We do not use advertising cookies, third-party analytics, or cross-site trackers. Clearing your browser storage signs you out and empties the cache.
6. How long we keep things
- Your collection and profile: until you delete them or ask us to close your account.
- Server logs: a short rolling window, kept for diagnostics.
- Billing records: retained as long as tax and accounting law requires, typically seven years, even after an account closes.
- Age-verification record: retained while the account exists, as evidence we performed the check.
- Feedback you send us: it arrives as an email in our support mailbox and stays there while we work on it and as a record of what was reported. Ask us and we will delete a report and its screenshot.
7. Your choices
You can view and edit your profile and collection in the app at any time. You may also ask us to:
- Send you a copy of the personal information we hold;
- Correct anything inaccurate;
- Delete your account and its contents.
Email support@cellar-dash.com from the address on your account and we will action it within 30 days. Deletion removes your collection, images, and profile; we keep only the billing records the law requires.
Depending on where you live — for example California, or the EEA and UK — you may have additional statutory rights, including to object to or restrict certain processing, and to complain to your data protection authority. We honour these requests regardless of where you live. We have never sold or shared personal information for advertising, and we do not intend to.
8. Security
Connections are encrypted in transit. Your collection is isolated per account, image uploads go to a private bucket reachable only through short-lived links, and administrative access is limited to the operator of the service. No system is perfectly secure, but we keep the number of places your data lives deliberately small.
9. Age
Cellar Dash is not for anyone under the legal drinking age, and never for anyone under 18. We do not knowingly collect information from children. If you believe a child has given us information, contact us and we will delete it.
10. Changes
If we change this policy, the version and effective date above will change with it. We will give notice in the app or by email before a material change takes effect.
11. Contact
Cellar Dash, LLC — support@cellar-dash.com
Cellar Dash is operated by Cellar Dash, LLC. Questions about this page: support@cellar-dash.com.