This notice covers Wine App at wine.rickertdeheus.me.
Write to hello@rickertdeheus.me.
The app has no sign-in of its own and asks you for nothing. It uses the family account to show who is signed in, and visiting it involves the processing below.
Infrastructure
Each request your browser makes to wine.rickertdeheus.me reaches Vercel, the platform that hosts the app, with the details any web request carries, such as your IP address and browser type. Vercel runs the app's server code, serves the page and keeps serving and access logs of these requests. Which details those logs hold: undocumented (owner: Rickert de Heus).
Collected at: every request to wine.rickertdeheus.me.
Infrastructure
Vercel Web Analytics counts visitors and page views. Each page view is reported to an address on this app that Vercel handles, and Vercel adds it to the app's counts. A report holds the page's full address as your browser shows it, which page of the app that is, the time, the name and version of the analytics software and, when you arrive from another site, the address your browser gives for the page you came from. Which further details Vercel takes from the request that carries the report: undocumented (owner: Rickert de Heus). It sets no cookie.
Collected at: every page view on wine.rickertdeheus.me.
Functional
If you are signed in to the family account, your browser sends the account's sign-in cookie with every request here (section 9). When you open the app's home page, the app reads that cookie, looks up the session and the account it belongs to in the family account database, and uses two things from them: the account's ID and its email address. It shows the email address on the page, so you can see which account is signed in. It also reads the idle-timeout choice of your family account. If that choice is one or three days, the app records the session's latest activity, or ends the session when it has been idle for longer than your choice, which signs you out of the family account. The app stores none of this itself.
Collected at: the home page of wine.rickertdeheus.me, on each visit while you are signed in.
Optional tracking: none.
The app's code sets aside its own space for features it does not have yet: an area named wine_app in the family's Neon database, with one table for app settings that nothing reads or writes, and keys starting wine: in the family's Upstash Redis store, which no code writes. Neither holds any data about you.
A basis is stated only from a recorded assessment. None exists yet.
The app's server code runs in Vercel's Frankfurt region (fra1). That shows where the code runs, not where the vendors named above keep data or whether they move it elsewhere.
The family sign-in cookie. The family account center sets it when you sign in there, for every rickertdeheus.me address, so your browser sends it here too. Its name ends in better-auth.session_token. The app reads it (Family sign-in check, section 3) and never sets a cookie of its own. How long the cookie lasts is the account center's session policy (section 10).
The app saves nothing in your browser's storage. Before a page draws, a small script checks this browser's storage for appearance choices saved on this app (theme, accent colour and text size). The app never saves them, so it shows the defaults.
On every page view, the Vercel Web Analytics script also checks this browser's local storage for one entry, named __va_attribution, where a site can keep a visitor ID to send with each page view. It is not a cookie. This app never sets a visitor ID, so the script never writes that entry and sends nothing from it.
None. Nothing in the app depends on your consent, and everything it loads comes from this app itself.
Vercel Web Analytics runs cookieless and without an opt-in.
The app keeps no account or record of its own about you, so it has no export, correction or deletion route of its own. The rights path for each kind of processing:
Sign-in, sign-out and every account page are at the family account center, account.rickertdeheus.me, which you can open without signing in. Its processing is separate from this app's.
To sign up, the account center collects an invite code, your first and last names, your email address and a password. A signed-in session lasts a year and renews as you use it, by deliberate policy.
You can export your account data at the account center. Deleting your account there starts a 14-day grace period, after which the account is purged. How a deletion reaches every app in the family is still being coordinated. This app holds no account data of its own, so the account center's export and deletion cover the account data this app uses.
How long the family account keeps some of its data: