Privacy Policy
BlindRank runs wine tastings with a group ranking. This policy explains which data we handle, why we handle it and how you can request access, correction or deletion.
The contact for privacy requests is contato@blindrank.wine.
1. Data we handle
We may handle the following data:
- Account data: name, email, sign-in information and data received from Google OAuth when you sign in with Google.
- Tasting data: tastings created, wines added, labels, evaluations, rankings, comments, results and history.
- Data from tasters who join with the PIN: display name, evaluation, ranking, optional email, tasting identifier, token, date and time of participation.
- Technical data: IP address, device, browser, operating system, access logs, usage events and pages visited.
- Photos and images: photos of labels sent for identification by camera or automated reading.
The taster who joins with the PIN does not need an account. Even so, BlindRank handles data tied to their participation in that tasting.
2. Purposes
We use the data to:
- create and maintain organizer accounts;
- allow tastings to be created, joined, tallied and revealed;
- display rankings, results and the history of tastings;
- send results and beta communications when an email is provided;
- identify labels from a photo, when that feature is used;
- prevent abuse, fraud and improper access;
- fix errors, measure use and improve BlindRank;
- comply with legal obligations and protect rights.
The legal bases are performance of a contract, legitimate interest, compliance with a legal obligation and consent when required.
3. Sharing
We do not sell personal data.
The organizer of a tasting can see data tied to that tasting. That includes display name, evaluations, ranking and the optional email when provided.
We use the providers needed for BlindRank to work:
- Supabase: authentication, database, storage and technical logs.
- Vercel: hosting, deployment, serverless functions and technical logs.
- PostHog: analytics of product use and events, in aggregated or pseudonymized form.
- Resend: sending of transactional emails and tasting results.
- Google OAuth: sign-in with Google, when you choose that method.
- Google Gemini: reading of label photos, when the camera feature is used.
These providers may process data outside Brazil.
4. Cookies and analytics
We use cookies and similar technologies for sign-in, security, operation of the app and analysis of use.
Essential cookies keep the session active and protect access. Without them, sign-in and authenticated areas may not work.
Analytics helps us understand use, errors and friction. We do not use behavioral advertising cookies and we do not sell data to advertisers.
PostHog may use persistent identifiers. For that reason, we treat analytics as aggregated or pseudonymized data, not as anonymous data. In the current configuration, we do not use session recording.
5. Retention and deletion
We keep data for as long as needed to provide the service, preserve the history of tastings, comply with legal obligations or protect rights.
You can delete the account in Profile, inside the app. You can also request deletion by email at contato@blindrank.wine.
After deletion, personal data from the account is deleted from the active systems. Technical data, logs and backups may be retained for security, fraud prevention, legal obligations or the retention periods of the providers.
Data from group tastings may be deleted or anonymized to preserve the history of other tasters.
See also Account Deletion.
6. Rights of the data subject
Under the Brazilian General Data Protection Law (LGPD), you can request:
- confirmation that your data is handled;
- access to the data;
- correction of incomplete, inaccurate or outdated data;
- portability, when applicable;
- information about sharing;
- anonymization, blocking or erasure;
- withdrawal of consent;
- objection to the handling of your data, when applicable.
Requests should be sent to contato@blindrank.wine.
7. People under 18
BlindRank is not intended for people under 18.
8. Security
We adopt reasonable technical and organizational measures to protect the data.
The measures include authentication, access control, Row Level Security, encryption in transit, logs and restricted administrative access.
If there is an incident involving personal data, we will assess the impact and make the communications required by the applicable law.
9. Changes
This policy may be updated. The current version will always be available at https://blindrank.wine/en/terms-and-privacy/privacy/.