Privacy Policy
Last updated: March 30, 2026
1. Information We Collect
Account Information: When you create an account, we collect your name, email address, and a hashed version of your password. We never store your password in plain text.
Usage Data: We collect information about how you interact with the site, including wineries you favorite, visits you log, journal entries, and trip plans you create.
Click Data: When you click outbound links (such as winery websites, booking links, or affiliate links), we log the type of click, the destination URL, and the page you were on. This data is not linked to your account and is used to understand which content is most useful to our visitors. Click data is retained for 90 days.
Cookies: We use only essential session cookies required for authentication. We do not use tracking cookies, advertising cookies, or third-party marketing cookies.
2. How We Use Your Information
- To provide and maintain your account and personalized features
- To save your favorites, visited wineries, journal entries, and trip plans
- To enable sharing features (shared trips and collections, when you choose to share)
- To improve our service, understand what content is most useful, and fix bugs
- To send transactional emails (password resets) — we do not send marketing emails
3. Third-Party Services
We use a small number of trusted third-party services to operate this site:
- Vercel — hosting and image optimization
- Turso — database hosting (your data is encrypted in transit)
- Resend — transactional email delivery (password resets only)
- Vercel Web Analytics — privacy-friendly pageview analytics, no cookies, no personal data collected
- Cloudflare Web Analytics — server-side pageview measurement via our CDN, cookie-free
- Google Maps — map display and location services on map pages
Affiliate Links: Some pages contain links to hotel booking sites and wine retailers. When you click these links, the destination site may collect its own data subject to their privacy policies. We may earn a commission from bookings made through these links, at no extra cost to you.
4. Data Sharing
We do not sell, trade, or rent your personal information to third parties. We share data only with the service providers listed above, solely for the purpose of operating this site, and when required by law.
5. Data Retention
Account data (profile, favorites, journal entries, trips) is retained for as long as your account is active. If you delete your account, all associated data is permanently removed. Anonymous click tracking data is retained for 90 days and then deleted.
6. Data Security
We use industry-standard security measures to protect your data, including encrypted connections (HTTPS), hashed passwords (bcrypt), secure session management, and security headers to prevent common web attacks.
7. Your Rights
You have the right to:
- Access your personal data — you can view all your data in your account settings
- Export your data — download a copy of all your data from your account settings
- Correct your data — update your profile information at any time
- Delete your account and all associated data from your account settings
For any data requests we cannot fulfill through the site, contact us at the email below. We will respond within 30 days.
8. Age Requirement
This site is intended for users who are 21 years of age or older. We do not knowingly collect information from anyone under 21.
9. Changes to This Policy
We may update this policy from time to time. Changes will be posted on this page with an updated revision date.
10. Contact Us
If you have questions about this privacy policy or your data, please contact us at theinterchangestudio@gmail.com.