Privacy Policy

Last updated: 2 September 2026

This is how we handle your data and privacy for Check Your Wine. Transparency and security come first.

Check Your Wine, made by Devepoling, shows wine ratings next to wines while you shop for wine online. It comes as a browser extension for Chrome, and as an app with a Safari extension for iPhone, iPad and Mac. This policy applies to every version. Devepoling is responsible for the processing of personal data described here. For any privacy question, contact us at info@devepoling.nl.

In short

  • On a shop page the extension reads only the visible wine name. It does not read form fields, passwords, cookies, or any other page content.
  • The ratings are a paid feature, so Check Your Wine signs you in to a Check Your Wine account. That account is an email address and a password, nothing else.
  • We do not collect your browsing history, we do not track which shops or pages you visit, we run no analytics, and we use no advertising identifiers or fingerprinting. The apps carry no third-party tracking or advertising SDKs; we may collect anonymised crash and error reports to detect and fix faults.
  • Payments are handled by our payment processors (Stripe, or Apple on Apple devices). We never see or store your card details.
  • Our application and database run inside the European Union.

Categories of personal data we process

  • Account data: your email address, a hashed (irreversible) copy of your password, and the moment your email was verified.
  • Authentication data: an OAuth access token and refresh token, so you stay signed in, with the matching records on our server so we can issue and revoke them. On Chrome the browser extension holds these in its local storage; on iPhone, iPad and Mac the Check Your Wine app holds them and the Safari extension only asks the app whether you are signed in. Sign-in always uses the standard OAuth 2.0 Authorization Code flow with PKCE against our own server. We do not read your Google or Apple account identity.
  • Subscription data: whether your subscription is active, which product it is, and the purchase, renewal and expiry dates, received from RevenueCat and keyed to your account. Check Your Wine keeps a short-lived cached copy of "subscription active: yes/no" on your device.
  • Display preferences: which sources (Vivino, Wine-Searcher) you switch on or off, stored locally by the extension and synced through your browser profile only if you have that enabled.
  • Technical log data: standard server logs, including IP address and request time.
  • Crash and error reports: anonymised technical data about a crash or error, such as the error type and where in the app or extension it occurred. These contain no wine names or account data.

We do not receive or store your card number or payment-method details. Purchases are processed by RevenueCat Web Billing (which uses Stripe for card payments) for web purchases, and by Apple for purchases through Safari on iOS and macOS. We only receive the resulting subscription status.

Purposes of the processing

  • Creating and running your account and signing you in.
  • Delivering the paid rating features and checking that your subscription is active.
  • Performing wine-name lookups so the product works.
  • Keeping the service secure, preventing abuse and diagnosing faults.
  • Meeting our legal obligations, in particular keeping payment and invoice records.

Legal basis for the processing

  • Performance of a contract: account, sign-in and delivery of the paid features.
  • Legitimate interests: security, abuse prevention, fault diagnosis and the wine-name lookups that make the product work, weighed against your interests and rights.
  • Legal obligation: retention of payment and invoice records for the period required by tax law.

What we do not collect

  • Your browsing history or the list of sites, shops or pages you visit
  • Any page content other than visible wine names (no form fields, no cookies, no passwords)
  • Your name (we never ask for it), your location, or your device fingerprint
  • Advertising identifiers, tracking pixels or third-party analytics
  • Your Google or Apple account profile
  • Your card number or payment-method details

Recipients of personal data

We do not sell your data and we do not use it for anything unrelated to Check Your Wine. We share the minimum necessary with:

  • RevenueCat: subscription management. Receives your account identifier to link your purchases.
  • Stripe and Apple: payment processing for web and in-app purchases respectively.
  • Our email delivery provider: receives your email address to send account emails such as verification.
  • Our hosting provider (EU): stores the account and subscription records on our behalf under a data processing agreement.

External sites the extension contacts

  • Vivino (www.vivino.com): the extension fetches the public Vivino search page for a wine name and reads the rating from it. This is a normal page request with the wine name as the search term. No account, no personal data and no identifier are sent.
  • Wine-Searcher (www.wine-searcher.com): the extension never contacts Wine-Searcher on its own. It only builds a search link; your browser visits the site when you click it, as an ordinary visitor.

Check Your Wine on iPhone, iPad and Mac

On Apple devices Check Your Wine is an app together with a Safari extension.

  • Signing in and managing your subscription happen in the app. It is the same email-and-password account described above, on the same server.
  • The Safari extension does the same on-page work as the Chrome version: it reads the visible wine name, fetches the public Vivino search page, and builds the Wine-Searcher link.
  • The app and the extension talk to each other only on your device, through Apple's built-in native messaging. That channel carries nothing more than "signed in: yes/no" and "subscription active: yes/no". No data leaves your device because of it.
  • The app stores your sign-in state locally on your device. It contains no analytics or third-party tracking components. It may send anonymised crash and error reports so we can detect and fix faults.
  • Subscriptions on Apple devices are bought through Apple's In-App Purchase and managed via RevenueCat. Apple processes your payment; we receive only the subscription status.

Transfer of personal data to a third country

Our application and database run on infrastructure inside the European Union. Data stored on your device (tokens, preferences, cached subscription flag) stays on your device.

Some recipients are established in the United States (RevenueCat, Stripe, Apple). Where personal data reaches them, the transfer is based on the EU-US Data Privacy Framework where the recipient is certified, or otherwise on the European Commission's Standard Contractual Clauses.

Retention period

  • Account data: until you delete your account, after which it is removed within 30 days (backups roll off shortly after).
  • Authentication tokens: until they expire or you sign out or delete your account.
  • Subscription records: for as long as your account exists; the underlying payment and invoice records are kept for 7 years to meet Dutch tax-law requirements.
  • Server logs: a short retention period, then deleted.

Rights of data subjects

You have the right to submit a request to us for access to, correction of, restriction of, objection to, portability of and erasure of your personal data, and to withdraw consent where processing is based on consent. Email info@devepoling.nl; we respond within one month.

Deleting your account

You can delete your account from your account page at app.checkyourwine.com, from the app on your Apple device, or by emailing us. Deleting the account removes your email address, password hash and authentication tokens. Payment and invoice records that we are legally required to keep are retained for the statutory period and then deleted.

Security

Passwords are stored only as salted hashes. Traffic between the app, the extension, our servers and third parties is encrypted with TLS. Access to production data is limited to the people who need it. If a data breach affects you, we will notify you and the supervisory authority as required by law.

Children and legal drinking age

Check Your Wine is not directed at children and is intended for adults of legal drinking age in their country.

Changes to this policy

If this policy changes, we update the date at the top of this page. For material changes we also notify account holders by email.

Contact details

Devepoling
Frans van Mierisstraat 36, 9718 ST Groningen
info@devepoling.nl

Complaints

If you have a complaint about how Devepoling processes your personal data, please contact us first. You also have the right to lodge a complaint with the supervisory authority. In the Netherlands this is the Autoriteit Persoonsgegevens (autoriteitpersoonsgegevens.nl).

Privacy and the EU first

Check Your Wine is built and hosted in the European Union. We keep the amount of personal data we process to the minimum the product needs, and we work to keep every part of the chain within the EU.