1. Who we are
Poured is operated by Poured, based in the Netherlands. For privacy matters, you can contact us at [email protected].
2. What data we collect
- Account data — email address (via Google OAuth), display name, and profile picture provided by Google.
- Profile data — username, bio, website URL, and privacy preferences you set in your profile.
- Date of birth — collected once for age verification (Drank- en Horecawet). Not shared with third parties.
- Tasting logs — whisky reviews, scores, and tasting notes you create.
- Collection data — bottles you add to your collection, including purchase details you choose to record.
- Social data — accounts you follow, likes, and comments.
- Usage data — page views and Web Vitals collected via Vercel Analytics and Speed Insights, only if you consent.
3. Legal basis
- Contract (Art. 6(1)(b) AVG) — account, profile, tasting, and collection data are necessary to provide the service.
- Legal obligation (Art. 6(1)(c) AVG) — date of birth is processed to comply with the Drank- en Horecawet (minimum age 18).
- Consent (Art. 6(1)(a) AVG) — analytics cookies are only placed after you explicitly accept.
4. How long we keep your data
Your data is kept for as long as your account is active. When you delete your account, all personal data is permanently removed within 30 days. Analytics data is retained by Vercel for up to 30 days.
5. Third parties
- Supabase — database and authentication (EU data region). Privacy policy: supabase.com/privacy.
- Google — sign-in only. We receive your name, email, and profile picture. Privacy policy: policies.google.com/privacy.
- Vercel — hosting, analytics, and performance monitoring (if consented). Privacy policy: vercel.com/legal/privacy-policy.
- Open Food Facts — when you scan a barcode, the barcode number is sent to the Open Food Facts API to look up product information. Open Food Facts is a non-profit open database operated in France. Your IP address is transmitted as part of this request. No personal data beyond your IP is shared. Privacy policy: world.openfoodfacts.org/terms-of-use.
- UPC Item DB — if a barcode is not found in Open Food Facts, it is looked up via UPC Item DB as a fallback. Your IP address is transmitted as part of this request. Privacy policy: upcitemdb.com/privacy.
6. Cookies
We use the following cookies:
- Session cookie (essential) — keeps you signed in on the web. Cannot be disabled.
- Native session storage(essential, Android app only) — your session is stored in the device's secure native storage so you stay signed in across app restarts. This is equivalent to an essential cookie and cannot be disabled.
- Cookie consent (functional) — stores your analytics preference in localStorage.
- Vercel Analytics (analytics, consent required) — tracks page views anonymously.
- Vercel Speed Insights (analytics, consent required) — collects Web Vitals (LCP, CLS, FID).
7. Your rights
Under the AVG (GDPR), you have the right to:
- Access your data — request a copy via [email protected] or export it directly from Settings.
- Rectification — update your profile in Settings.
- Erasure — delete your account and all data in Settings.
- Portability — export your data as JSON from Settings.
- Objection / withdrawal of consent — withdraw analytics consent at any time in Settings.
You may also lodge a complaint with the Autoriteit Persoonsgegevens.
8. Contact
Questions about this policy? Contact us at [email protected]. We will respond within 30 days.