What we hold.

The data controller is Sparkling Book Club OÜ (registered in Estonia, EU). Questions go to hello@sparklingbookclub.com.

• Waitlist: email and locale. Single purpose - to ping you when access opens.
• App account: display name, profile photo (if you add one), club membership, bottles you've scanned, ratings, journal entries.
• Technical: device version, bug-report content (when you send one), anonymous usage statistics.

• We don't sell or rent your data to third parties.
• We don't expose your club content (cellar, journal, chat) to anyone outside the club.
• We don't follow you across the web with ad networks.

Data lives securely in the EU. Technical partners, all under EU law:

• Supabase - database and auth (eu-central-1, Frankfurt).
• Vercel - web and API hosting.
• Apple App Store / Google Play - app distribution, with their own privacy terms applied to account data.

Under GDPR you have the right to access, correct, port or delete your data. Email us - we respond within 30 days.

Waitlist emails are kept until access opens and the welcome message is sent, or until you ask us to delete. App content - while your account is active. Deleted-account data is removed within 30 days, except where bookkeeping law requires invoice records.