Privacy policy

What we store

• Your account: email address, display name and password. The password is stored as an argon2id hash, never in readable form — not even we can read it.
• If you turn on two-step verification: your authenticator secret and your recovery codes.
• What you enter: humidors, purchases, vendors, lots, tastings, notes, scores and photos.
• Your preferences: language, date format and time zone.
• An audit log: what was done in your account and when. It is there so you can review your own activity.
• Sign-in attempts, with the IP address they came from. They are kept to stop brute-force attacks against your account, and for no other reason.
• If you use the Android app: the phone model and the app version, so Preferences → Devices can show you where your account is signed in and let you sign it out from the web. The app session is kept in the phone's secure storage.

Cookies

Just one: the session cookie that keeps you signed in. It is essential for the app to work and is not used to track you. There are no advertising or measurement cookies.

What we do NOT do

• The website has no analytics, trackers, tracking pixels, support chat, or fonts loaded from third-party servers. This is not a promise: it is a written project rule. The only exception is the Android app, explained below.
• We do not sell, rent or share your data with anyone.
• There is no advertising.
• We do not use your data to train artificial intelligence models.

Where the data lives

The database is on Neon (PostgreSQL), in the São Paulo region. Photos are on Cloudflare R2. The app runs on Vercel, also in São Paulo. Email goes out through an SMTP provider. Each of them processes the data on our behalf and nothing more.

Who can see your data

Only you and the people you share it with. Separation between accounts does not depend on the code remembering to filter: it is enforced by the database itself, with row-level security. A guest sees only what the humidor owner chose to show them, and never tastings marked private.

Platform administration can see account data in order to operate the service and provide support. That is one person, and it is the owner of the site.

The Android app: usage and errors

The Android app uses Google's Firebase Analytics and Firebase Crashlytics to learn which screens are used and to receive a report when the app closes because of an error. What is sent: the screens viewed, a few events (signing in, searching the catalog, opening a tasting), technical data about the phone (model, Android version, language) and, if the app crashes, the technical details of the error.

Your email, your name, your humidor names, your notes and any amounts are never sent. To count users without identifying you, the app uses a code derived from your account with a key only our server holds: Google cannot get from that code to your account. The phone's advertising identifier is not used.

It is only turned on if you accept: the app asks you the first time you sign in, and nothing is sent until you choose, error reports included. Saying no changes nothing in the app. You can change your choice any time under Profile, with one tap. Google keeps usage data for two months and error reports for ninety days.

The app's scanner reads the cigar band with Google's ML Kit, on the phone itself: the photo is not uploaded to identify the cigar, only the text that was read travels to our server. ML Kit sends Google technical data about its own operation (which feature was used, how long it took, the phone model), never the photo or the text. The photo reaches Vitolarium only if you choose "Suggest to Vitolarium": it is stored with the suggestion so the administrator can check what was scanned.

What you share is public

If you share a tasting by link, that page is reachable by anyone who has the address, and search engines can index it. This is deliberate: the point is for it to be found. A shared link gets forwarded, so share only what you want seen. Tastings marked private are never included.

How long

For as long as your account is open. If you ask for it to be deleted, it is deleted: your data, your photos and your account. Audit and security logs may be kept somewhat longer if they are needed to investigate an incident.

Your rights

You can request a copy of everything of yours, its correction or its deletion. Write to the address below and we will answer.

Right of access and complaints

The data subject may exercise the right of access to their personal data free of charge at intervals of no less than six months, unless a legitimate interest is shown, as provided in Section 14(3) of Law No. 25,326 (Argentina).

The Agencia de Acceso a la Información Pública (Argentina’s Agency for Access to Public Information), supervisory authority under Law No. 25,326, is empowered to handle the complaints and claims filed in relation to any breach of the rules on personal data protection.

In Paraguay, anyone whose rights are affected may file a complaint with the Agencia Nacional de Protección de Datos Personales (ANPDP, the National Personal Data Protection Agency) under Law No. 7593/2025.

Contact

For anything on this page, write to privacidad@vitolarium.com.

Changes

If this changes, the date above changes. If the change is substantive — something we do not do today and would start doing — we will show it to you the next time you open Vitolarium, on the web or in the app, and ask you to accept it again before you continue.