Privacy policy

Who is responsible

[Your name] is the data controller for Barlune. Contact: hello@barlune.app.

Hosts

We store your email address, your events (name, date, menu, stock list), your payments (amount and currency, not card details) and your Event Pass balance. We use them to run your account and your menus.

Guests

Guests don't create accounts. To count votes and orders fairly, we set one random device id in a cookie and store only a scrambled (hashed) version of it.

If a guest orders a drink, we store the first name and note they type, so the host knows who it's for. Ratings are stored without names.

Photos of your shelf

If you scan your shelf, the photos are sent to Anthropic to recognise the bottles, then deleted. We don't keep them.

Beta requests, feedback and surveys

If you ask to join the beta, send feedback or answer a survey, we store what you send (and your email) to reply and to improve the service.

Analytics

We count page views and how far people get in the menu builder without cookies and without tracking you across sites (Vercel Web Analytics and our own anonymous counter).

Who processes data for us

Supabase (database, in the EU, Stockholm), Vercel (hosting and analytics), Stripe (payments, as merchant of record), Anthropic (shelf photo recognition), Resend (email) and Google (if you sign in with Google). Some of them may process data outside the EU under the EU's standard contractual clauses.

How long we keep it

Guest names and orders are deleted 30 days after the event. Events, menus, ratings and device ids are deleted 90 days after the event.

Your account stays until you ask us to delete it. Payment records are kept as long as accounting law requires (5 years in Norway).

Your rights

You can ask to see, correct, export or delete your data by emailing hello@barlune.app. You can also complain to Datatilsynet, the Norwegian data protection authority.