Privacy

wemos GmbH (details in the imprint). Privacy contact: [privacy email].

• Account: email address, language, time of the 18+ confirmation.
• Journal content you enter: tastings, notes, aromas, pairings, cigar band photos (re-encoded in your browser, which removes location and other photo metadata), humidor and wishlist.
• Subscription: plan, status and term. Payment data is processed only by the payment provider [Paddle or Lemon Squeezy], which sells the subscription as merchant of record and is a controller of its own.
• Technical data in the hosting provider's server logs (IP address, time, requested page), kept for [retention period per host].

Providing the journal and the subscription (Art. 6(1)(b) GDPR); keeping records required by law (Art. 6(1)(c)); security and abuse prevention through server logs (Art. 6(1)(f)).

• Supabase: database, sign-in and file storage, data region EU (Frankfurt).
• Vercel: hosting, region [region].
• Email delivery for sign-in codes: [SMTP provider].

Data processing agreements are in place. Transfers to the US are based on [EU–US Data Privacy Framework or standard contractual clauses, per provider].

Only what the service needs: sign-in cookies, the language cookie (NEXT_LOCALE) and the age confirmation (cj_age). Your colour scheme, offline drafts, cached pages and your cigar history for suggestions are stored on your device only and are removed when you sign out or another account signs in. There are no tracking or advertising cookies, so no consent banner is needed (§ 165(3) TKG 2021).

Journal and account data until you delete your account. Deletion is immediate and includes your photos. Records the law requires us to keep: [if any].

Access, rectification, erasure (directly in the app under Account), restriction, data portability (CSV export of all tastings, free for every account) and objection. You can complain to the Austrian Data Protection Authority, Barichgasse 40–42, 1030 Vienna, www.dsb.gv.at.

The service is for adults only (18+).