WineSteals ("we", "us", "our") is committed to protecting your privacy. This policy explains what personal data we collect, why we collect it, and how we handle it — in line with the General Data Protection Regulation (GDPR) and Dutch law.
1. Who we are
WineSteals is operated by an individual founder based in Amsterdam, the Netherlands. We can be reached at hello@winesteals.nl.
2. What data we collect
We only collect data that is necessary for the service to function.
- Email address — when you sign up for our waitlist, we store your email address to contact you about WineSteals.
- Usage data — if you consent to analytics cookies, we collect anonymised data about how you use the site (pages visited, time on site). No personal identifiers are stored.
- Uploaded files — if you upload a wine list (photo or PDF), we process it to extract wine and price data. We do not store uploaded files after processing.
3. Why we process your data
- Waitlist management — to inform you when WineSteals launches. Legal basis: your consent (Art. 6(1)(a) GDPR).
- Service improvement — anonymised analytics to understand how the site is used. Legal basis: legitimate interest (Art. 6(1)(f) GDPR), only when analytics cookies are accepted.
- Advertising — if you accept advertising cookies, we may show personalised ads via Google AdSense. Legal basis: your consent (Art. 6(1)(a) GDPR).
4. Cookies
We use cookies in three categories:
- Functional cookies — strictly necessary for the site to work (e.g. remembering your language preference and cookie consent). These are always active.
- Analytics cookies — anonymised usage tracking (Google Analytics). Only active if you accept.
- Advertising cookies — used by Google AdSense to show relevant ads. Only active if you accept.
You can change your cookie preferences at any time via our cookie policy page.
5. Third parties
We share data with the following third parties, only to the extent necessary:
- Google (Analytics & AdSense) — only if you consent to analytics or advertising cookies. Google may process data outside the EU under Standard Contractual Clauses.
- Hosting provider (Netlify) — our site is hosted on Netlify. Server logs may temporarily record IP addresses. See Netlify's privacy policy.
We do not sell your personal data to any third party.
6. How long we keep your data
- Waitlist emails — until you unsubscribe or WineSteals launches and transitions to a proper user account system, whichever comes first.
- Analytics data — retained for 14 months in Google Analytics (anonymised).
- Uploaded wine lists — deleted immediately after processing, not stored.
7. Your rights
Under the GDPR, you have the right to:
- Access the personal data we hold about you
- Correct inaccurate data
- Request deletion of your data ("right to be forgotten")
- Withdraw consent at any time (this does not affect prior processing)
- Lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) at autoriteitpersoonsgegevens.nl
To exercise any of these rights, contact us:
8. Changes to this policy
We may update this privacy policy from time to time. We will notify waitlist subscribers of any significant changes by email. The date at the top of this page always reflects the latest version.