Privacy policy

Data controller

• Name: registration in progress
• Address: registration in progress
• Email: published here when the service opens

The data collected

Without an account, you can explore Oenopia without giving any personal information. With an account, Oenopia records:

• Account: your email address and your password, which our authentication provider keeps in hashed form, never in clear text; if you sign in with Google or Apple, the identifier, email address and, where provided, the name and profile picture that service sends us; the date on which you confirmed that you are of legal drinking age.
• Profile: your first name or nickname, your language, the level you declare, your public nickname, your player number, and your choices to appear on the leaderboards and to be findable by other players.
• Welcome: what brings you to Oenopia (discovering, choosing better, deepening, preparing for a qualification or a career), the level and the time per day you choose when you arrive, and the date you answered or skipped these questions.
• Learning and games: your daily goal, your progress through the courses, your answers to the questions and their result, your experience points, your streak and the daily challenge, your games and scores, your trophies, and your collection: the grapes and appellations you have discovered, with their date.
• Corks (the game currency, which cannot be bought): each reward and each spending, with its amount, its reason and its date, and your streak freezes, with the day each one covered. They are used only to run the game and are deleted with your account.
• Tasting notebook: the wines you rate (name, vintage, region, grape), your observations, your guesses in blind tastings, your free notes and your score.
• Friends: friend requests, friendships and blocks.
• Feedback: the rating, the message, the page you send it from, your language and the platform used (website or app).
• Subscription: the purchase platform (website, Apple or Google), the subscription status, the end date of its period, the plan chosen and the identifier given by our subscription management provider. Oenopia never receives your card details.
• Daily question, if you turn it on: the time and time zone you choose, the language, and for each browser or device that receives it, the notification subscription address its notification service provides, with the keys that encrypt the message (browser), or the phone's notification token (app); each day, the question sent and your answer.

As with any website, your IP address and the technical details of your browser or device are processed by our hosts to run and secure the service.

Why, and on what basis

• Providing the service (account, progress, notebook, games, corks, leaderboards, friends, subscription): performance of the contract, that is the terms of use and the terms of sale (GDPR article 6(1)(b)).
• Personalising your welcome and which courses are put forward (your starting point, the tips of the arrival screen) from your answers to the welcome questions, which never restrict access: performance of the contract (article 6(1)(b)).
• Improving Oenopia through your feedback, securing the service and preventing abuse, measuring the website's audience anonymously: the publisher's legitimate interest (article 6(1)(f)).
• Keeping a record of your legal-age confirmation, asked because Oenopia deals with alcoholic drinks: the publisher's legitimate interest (article 6(1)(f)).
• Keeping the accounts of payments: legal obligation (article 6(1)(c)).
• Sending you the daily question, if you turn it on: your consent, given by turning it on and allowing the browser's or the phone's notifications (article 6(1)(a)). You withdraw it at any time by turning it off in your profile or blocking the browser's or the phone's notifications.

Your data is never sold, rented or used for advertising.

How long

• Your account data is kept as long as the account exists. When you delete it from your profile, it is erased, including your feedback; the host's technical backups are erased as they rotate.
• Accounting records of payments are kept for the period required by accounting and tax obligations, even after the account is deleted.
• A visitor's progress, notebook and answers to the welcome questions stay in their browser or on their device until they clear them; if they create an account, they are carried over to it and kept as long as the account exists.
• Daily question: the questions sent and your answers are kept for 90 days; a browser's subscription or a phone's token is erased when you turn the question off on that device, or 30 days after its notification service has declared it expired; all of it is erased with the account.

What other players see

On the leaderboards and in the friend search, other players see your nickname, or your player number if you have not chosen one, and your scores. They never see your email address. From your profile, you can stay off the leaderboards and choose not to be findable.

Service providers

Oenopia entrusts some operations to processors (GDPR article 28), who use your data only for the service they provide to Oenopia:

• Supabase (Supabase Pte. Ltd., Singapore): database and authentication. The database is hosted in the European Union, in Paris.
• Vercel (Vercel Inc., United States): website hosting.
• Stripe: payment of the subscription on the website.
• RevenueCat (RevenueCat, Inc., United States): tracking subscriptions across the website and the apps.
• Apple and Google: in-app purchases and, if you choose it, signing in with your Apple or Google account, under their own privacy policies.
• Plausible (Plausible Insights OÜ, Estonia): website audience measurement, hosted in the European Union.
• The browsers' notification services (Google, Mozilla, Apple or Microsoft, depending on your browser): they carry the daily question to your device, as an encrypted message they cannot read.
• Expo (650 Industries, Inc., United States): it carries the daily question to the app, through Apple's and Google's notification services. This message is not end-to-end encrypted: it holds the question and its answers, without your name or email address.

The maps on the website and in the apps load their base maps from OpenFreeMap and their elevation data from Amazon Web Services: when you view a map, these services receive your device's IP address, as for any resource loaded over the internet.

Transfers outside the European Union

Some providers are based outside the European Union, notably in the United States and Singapore, or may access the data from there. Depending on the provider, these transfers rely on an adequacy decision of the European Commission (GDPR article 45) or on standard data protection clauses adopted by the Commission (article 46).

Cookies and storage on your device

• On the website: strictly necessary cookies, to keep you signed in and, where relevant, to remember your language; the browser's local storage, to keep the progress and tasting notebook of a visitor without an account; session storage, during a Google or Apple sign-in from the sign-up page, for the age-confirmation date.
• In the apps: your session, in the device's secure storage; your language and the answers waiting to be sent, in the app's local storage.

These trackers only serve the service you ask for, so they need no consent (article 82 of French law no. 78-17 of 6 January 1978, known as the "Informatique et Libertés" law). Oenopia uses no advertising cookie and no social network tracker.

Audience measurement

The website measures its audience with Plausible Analytics, a tool that uses no cookie and stores nothing on your device. It produces only overall statistics (pages viewed, referring site, device type, country) and does not keep IP addresses. The data is hosted in the European Union and serves the publisher only. This measurement follows the conditions set by the CNIL, the French data protection authority, for doing without consent. The apps contain no audience measurement tool.

Your rights

You have the right to access, rectify and erase your data, to restrict its processing, to data portability and to object (GDPR articles 15 to 18, 20 and 21). You can also set instructions for what happens to your data after your death.

You can edit your profile and delete your account directly from your profile. For any other request, write to published here when the service opens.

If you believe your rights are not respected, you can lodge a complaint with the CNIL, at www.cnil.fr, or with the supervisory authority of your country (GDPR article 77).

Age

Oenopia is intended for people of legal drinking age. It does not knowingly collect data about minors; an account opened by a minor may be deleted as soon as the publisher learns of it.

Changes to this policy

This policy may change, for instance if a new feature collects other data. The version in force and its date appear on this page.