Privacy Policy

In short

Le GlouGlou works without a password, without advertising and without in-app purchases. This page tells you which of your data we collect, why, who we entrust it to and how long we keep it. It is written to be read, not to be skipped. If anything is unclear, write to us.

Who is responsible for your data

The data controller is Samuel Masson. Le GlouGlou is one person's project, not a company, so there is no corporate mailing address to give you.

One address for anything touching your data: contact@le-glouglou.com. The same person reads it and answers it.

What we collect, and on what grounds

Every piece of data is here for a specific reason, and rests on a specific legal basis. Here they all are, with none left out.

• Your email address. It identifies your account and receives your single-use sign-in codes. Legal basis: performance of our contract with you. This data is tied to your identity.
• Your first name. So we can greet you by name rather than by an ID. Legal basis: performance of the contract.
• Your favorites and taste preferences — the wines, recipes and occasions you mark as loved, liked or meh. They are the service itself, and they sharpen your recommendations. Legal basis: performance of the contract.
• Your display language. So the app opens in the right language from one device to the next. Legal basis: performance of the contract.
• Your usage data — screens viewed, paths followed, session length. It tells us what is useful and what is not. Legal basis: our legitimate interest in improving the app. The identifier attached to it is pseudonymized with a salted SHA-256 hash, computed on your device before anything is sent: your real identifier never leaves the phone.
• Crash diagnostics. When the app falls over, we get enough to understand why: the place in the code, the iOS version, the device model. No personal data. Legal basis: our legitimate interest in fixing what breaks.
• Searches that returned nothing. When you look for something we do not have, we record the text you searched for, so we know what to add to the catalog. Legal basis: our legitimate interest in enriching the content. No identifier goes with these searches: the table that receives them has no column that could tie them to anyone. They are technically anonymous.

The app never asks for your location, your contacts or access to your photos.

What we do not do

This list matters as much as the previous one.

• No advertising, anywhere.
• No advertising profiling.
• No advertising identifier, no IDFA.
• No tracking across apps or across sites.
• No selling or renting of your data, to anyone.
• No cookies and no JavaScript on this website.

Who we entrust your data to

Running an app takes a few providers. Here they all are, with what they do and where they do it.

• Supabase — the database, authentication and app content. Our database is hosted in Paris.
• TelemetryDeck — audience measurement. Hosted in the European Union.
• Sentry — crash diagnostics. European region.
• Netlify — hosting for this website.
• Apple — App Store distribution and the aggregate download statistics that come with it.

Where your data lives

Your account data and your usage data are hosted in the European Union. Some of our processors are, however, US companies, operating under standard contractual clauses.

How long we keep it

• Your account and everything attached to it: 36 months after your last sign-in. In the 35th month you get a warning email — simply signing in resets the clock.
• Your usage and diagnostic data: according to the retention policy of the processors concerned. We keep no copy of our own.
• Searches that returned nothing: with no time limit. Not out of neglect, but because they are anonymous by construction. No identifier can tie them to a person, so there is no one whose retention would need limiting.

The emails you get from us

We send no promotional email. No newsletter, ever. No nudges.

The only emails that leave here are your sign-in codes, the warning before an inactive account is deleted, and our replies when you write to us.

This website

This site sets no cookies, uses no analytics tools, runs no JavaScript and loads nothing from a third-party service. Nothing about your visit is recorded.

Signing in without a password

Le GlouGlou does not use passwords. You enter your email and receive a 6-digit code valid for a few minutes. No password is ever created, transmitted or stored, by us or by anyone else.

Using the app without an account

You can explore all of the content as a guest, without creating an account. An account only becomes useful for saving your favorites and receiving personalized recommendations.

Your rights

You have the right to access, correct, erase, object to, port and restrict the processing of your data.

To delete your account, you need no one: open the Profile screen in the app and tap Delete account at the very bottom. Deletion is immediate and permanent.

For everything else — seeing your data, correcting it, getting a copy of it, objecting to audience measurement — write to contact@le-glouglou.com. There is no setting in the app to switch audience measurement off: objecting goes through that address, and we act on it.

One honest caveat about erasure: hashed data and anonymous searches cannot be tied to anyone, not even to you. So we cannot find them in order to erase them individually. That is the price of their anonymity, and it is rather good news.

If our answer does not satisfy you, you can lodge a complaint with the CNIL, the French data protection authority, at 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France, or at cnil.fr.

For adults only

Le GlouGlou is about wine. It is meant for adults only — 18 and over in France. We do not verify your age when you sign up: it is a condition of use, and we trust you to respect it.

Excessive drinking is harmful to your health. Please drink responsibly.

If this policy changes

The date at the top of this page shows the last update. If something substantial changes — a new piece of data collected, a new processor, a purpose that shifts — we will let you know by email before it takes effect.