Privacy policy

1. Who is responsible for your data

The data controller is [Operator name / company name] ([Registry code, if a company]), [Postal address]. Contact: [contact@email].

2. What we collect

• Account details: your email address, display name and password (stored only in encrypted, hashed form).
• Your contributions: drinks you add or upload, and error reports you submit, linked to your account.
• Technical data needed to run the site: sign-in session data and your language choice, stored in your browser, and standard server logs (such as IP address and time of request) kept by our hosting provider for security.

Browsing the drinks registry does not require an account, and we do not use advertising or tracking cookies.

3. Why we use it and on what legal basis

• To create and run your account and let you contribute — performance of our agreement with you (GDPR Art. 6(1)(b)).
• To moderate submissions, prevent abuse and keep the site secure — our legitimate interest (GDPR Art. 6(1)(f)).
• To meet legal obligations where they apply (GDPR Art. 6(1)(c)).

4. Who we share it with

We do not sell your data. It is stored and processed by our hosting and database provider (Lovable, lovable.dev) and its infrastructure partners, acting on our behalf under data processing agreements. Where data is processed outside the EU/EEA, this is done with appropriate safeguards such as the EU Standard Contractual Clauses.

Drink information you contribute is published on the site, but your name and email are not shown to other users.

5. How long we keep it

• Account details (email, display name, password): until you delete your account.
• Drinks you added and error reports you sent: kept in the registry after account deletion, but no longer linked to you.
• Server logs: kept by our hosting provider for a limited period for security purposes.

6. Your rights

You have the right to access, correct and delete your data, to receive it in a portable format, to restrict or object to its processing, and to withdraw consent where processing is based on consent.

You can delete your account and its data at any time from your account page. For any other request, email us at the address above.

You also have the right to complain to the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon, www.aki.ee).

7. Children

Igajook is an information registry open to everyone to browse. Accounts are not intended for children under 13, and we do not knowingly collect their data.

8. Changes

We may update this policy. The date at the top shows when it was last changed.