Privacy policy

Who operates this service

My Bottle Collection at mybottlecollection.com is operated by Owen Brodal-Robertson. Contact support@mybottlecollection.com for privacy questions, requests or complaints.

Information we collect

• Your account: your name, email address, account identifier, verification status and sign-in security records. If you choose an email/password account, we store a password hash rather than your plain-text password.
• Google or Facebook sign-in: the provider name, its identifier for your account, and your name and email address when supplied. You may provide an email address yourself if the provider does not supply one. We store the login association; provider access and refresh tokens are not retained in your account records. We do not receive your Google or Facebook password.
• Your collection: cabinet names, memberships and roles; bottle details, prices and purchase sources you enter; photos and captions; remaining stock; pours, dates, tasting notes and participant names you choose to record.
• Connections and operations: ChatGPT authorization grants and permissions, share-link settings, action/audit records and retry records used to prevent duplicate changes, verification/recovery messages and support correspondence.
• Technical information: IP addresses used for security/rate limiting, request and error information, and browser cookies needed to maintain and protect sign-in. The web server and hosting services may also process connection logs.

We collect information directly from you, from people who grant cabinet access or add shared records, from the sign-in provider you choose, and from requests made to the service. Please avoid putting unnecessary personal information about other people into photos or notes.

Why we use it

We use this information to create and secure accounts, verify email addresses, link sign-in methods, recover access, store and display collections, record changes, provide sharing and ChatGPT features you choose, prevent misuse, troubleshoot faults and answer support or privacy requests.

Email/password sign-in remains available without social sign-in. ChatGPT access is optional. The current website does not include advertising trackers or third-party analytics scripts.

Who can see your information

Collection access follows cabinet membership and roles. Members with access can see the cabinet information available to their role; cabinet owners can manage membership. Authorized administration and service providers may access information as needed to operate, maintain, secure and support the service.

Public sharing: anyone who has a public share link can view and forward it. Prices, notes, remaining stock and photos are excluded unless the owner elects to include them. Links show live selected details until revoked or expired. Revoking a link cannot erase copies already saved by someone else.

We may disclose information where required by law or where necessary to address misuse, protect the service or handle a dispute. We do not use collection records to provide an advertising service.

Google, Facebook and ChatGPT

Choosing Google or Facebook sign-in lets that provider process the sign-in request under its own terms and privacy policy. New accounts still require My Bottle Collection email verification. Linking a provider to an existing account requires a fresh email confirmation.

When you connect ChatGPT and use this app in a conversation, requested account/collection data, photos and tool results are sent to OpenAI to fulfil those requests. Approved tools can also change records within your permissions. Our server does not need your full ChatGPT conversation history to execute these tools. OpenAI handles conversations and data it receives under its own terms, privacy settings and policies.

Disconnect ChatGPT using ChatGPT access on the website or manage the connection in ChatGPT. Disconnecting prevents future authorized access; it does not delete information already included in a conversation.

See the providers’ policies: Google, Meta/Facebook and OpenAI.

Storage, security and cookies

The website, database and account email service run on a BinaryLane virtual private server in Adelaide, Australia. Backups are retained for two days. Google, Meta, OpenAI and their service providers may process information outside Australia when you use their features; their privacy policies describe their international processing arrangements.

We use HTTPS, access controls, password hashing and protected sign-in/token mechanisms. Some operational payloads are encrypted. These measures reduce risk but cannot guarantee absolute security.

The website uses necessary cookies for your session, temporary social sign-in and protection against forged requests. Blocking these cookies can prevent sign-in or account actions. The external services you choose may use their own cookies.

Retention and deletion

Collection records are kept to provide your collection and its history; finishing a bottle does not delete its record. Account and operational records do not currently have a single fixed automatic deletion schedule. Contact us to request deletion or details about a particular record.

Deletion requests are handled manually after checking identity and scope. We will explain what can be removed or anonymised and any information retained for security, legal obligations, disputes or shared-cabinet integrity. A request concerning your account does not authorize deletion of someone else’s collection.

After information is removed from the live service, older copies may remain in the two-day backup rotation until those backups expire. Copies held by other members, share-link recipients or external services require separate consideration and may remain outside our control. See data-deletion instructions, including removal of Facebook-related information.

Your choices, requests and complaints

You can edit supported collection details in the website, remove bottle photos where your role allows, manage sharing, and disconnect ChatGPT. For account access, correction, deletion, removal of a social-login association, or a privacy complaint, email support@mybottlecollection.com from your registered address where possible.

Tell us what you need; do not send passwords, access tokens or verification links. We may ask for proportionate evidence of account ownership. We will review the request, reply with next steps and explain any limitation or refusal. For complaints, we will investigate and respond to your concerns. If unresolved, you can seek guidance from the Office of the Australian Information Commissioner or another relevant privacy regulator.

Changes to this policy

Updates will be published on this page with a revised date. Material changes will be brought to users’ attention through an appropriate website notice or account email.