Last updated: July 24, 2026
Wino Notion ("we," "us") is an independent winery discovery and review platform operated by Wino Notion LLC. This policy explains what information we collect, how we use it, who we share it with, and the rights you have over it. Questions any time: wino@winonotion.com.
Information you provide. When you create an account we collect your email address (and, if you sign in with Google, the name and email your Google account shares). If you save favorite wineries, write reviews or ratings, set alert preferences, or upgrade to a paid plan, we collect that content and the associated preferences. If you email us, we keep the correspondence. If you sign up for our newsletter, we collect the email address you enter, the page you signed up from, and your confirmation.
Information collected automatically. Our hosting provider logs standard technical data such as IP address, browser type, pages requested, and timestamps for security and operations. We use browser localStorage for functional purposes only, such as remembering that you already submitted a quick rating. We do not run advertising trackers and we do not use third-party analytics services.
Payment information. Payments for premium memberships and business listings are processed by Stripe. Your card number goes directly to Stripe and never touches our servers; we receive only confirmation of payment, the plan purchased, and the billing email needed to activate your account. Stripe's handling of your data is described in the Stripe privacy policy.
We do not sell your personal information, and we do not share it with third parties for their own advertising. We have not done either in the preceding 12 months.
We use a small set of processors, each limited to the service it performs for us: Supabase (account authentication and our database of favorites, reviews, and profiles), Stripe (payment processing), Netlify (hosting and serverless functions, including standard server logs), Cloudflare Turnstile (bot protection on the review form, which processes technical browser signals to distinguish humans from bots), Resend (delivery of transactional and newsletter email), and Google (sign-in with Google, and the winery ratings and photos we display via the Google Places service). Map tiles are served by Carto/OpenStreetMap. When your browser loads third-party content such as winery photos or map tiles, those providers receive your IP address as part of serving the request.
Some outbound links on Wino Notion - for example to the Priority Wine Pass, hotel and tour booking sites, and similar partners - are affiliate links. If you click one, the partner may set its own cookies and can tell that you arrived from our site, and we may earn a commission on qualifying purchases at no cost to you. What partners collect on their own sites is governed by their privacy policies. See our affiliate disclosure.
We keep this minimal. Signing in sets authentication cookies/tokens so you stay logged in. localStorage remembers small functional preferences on your device. Cloudflare Turnstile may set a cookie solely to perform its bot check. We do not set advertising or cross-site tracking cookies. Because there is no accepted standard, we currently do not respond to browser Do Not Track signals; because we do not sell or share personal information for targeted advertising, there is nothing to opt out of via Global Privacy Control signals, but you can exercise all rights below regardless.
For residents of California and other states with comprehensive privacy laws, here is the summary of what we collect and why:
| Category | Examples | Source | Purpose | Disclosed to | Sold or shared | Retention |
|---|---|---|---|---|---|---|
| Identifiers | Email address, name from Google sign-in | You | Account operation, transactional email, newsletter (with your consent) | Supabase, Resend, Stripe (billing email) | No | Life of account + limited backup window |
| Commercial information | Plan purchased, payment confirmations | You, Stripe | Activate and manage paid plans | Stripe | No | As required for tax and accounting |
| User content | Reviews, ratings, saved wineries, itineraries | You | Provide the features; publish approved reviews | Supabase; approved reviews are public | No | Until you delete it or close your account |
| Internet activity | IP address, pages requested, browser type | Automatic (server logs, Turnstile) | Security, abuse prevention, operations | Netlify, Cloudflare | No | Short rolling log windows |
You can access, update, or delete your saved wineries and reviews from your account at any time, and you can close your account entirely. Depending on where you live - including under the California Consumer Privacy Act as amended (CCPA/CPRA), other US state privacy laws, and the GDPR - you may have the rights to: know the categories and specific pieces of personal information we hold about you; delete it; correct inaccurate information; port it in a usable format; and not be discriminated against for exercising any of these rights. Because we do not sell personal information or share it for targeted advertising, there is no sale/sharing to opt out of.
To exercise any right, email wino@winonotion.com from the address on your account (or describe the information well enough for us to verify you). We will confirm receipt promptly and respond within 45 days, extendable where the law allows. You may use an authorized agent with written permission; we may still verify your identity directly. If we decline a request, you may appeal by replying to our decision, and you may also contact your state attorney general.
California "Shine the Light" (Civil Code 1798.83): we do not disclose personal information to third parties for their direct marketing purposes.
We keep personal information only as long as needed for the purposes above: account data for the life of your account, payment records as required for tax and accounting, server logs for short rolling windows, and correspondence as needed to resolve the matter. When you close your account, we delete or de-identify your personal information except where the law requires retention.
Wino Notion is an informational travel and discovery site and does not sell alcohol. Our services are not directed to children, and we do not knowingly collect personal information from anyone under 16. If you believe a minor has provided us information, contact us and we will delete it.
We use reasonable technical and organizational safeguards: encrypted connections (HTTPS) throughout, authentication and database security through Supabase with row-level access controls, and payment handling exclusively through Stripe so card data never reaches our systems. No internet service can guarantee absolute security; if you believe your account has been compromised, contact us immediately.
We are based in the United States and process information here. If you visit from elsewhere, you consent to processing in the US, and where the GDPR applies we rely on your consent and our legitimate interest in operating the service.
When we make material changes we will update the date at the top of this page, and for significant changes affecting account holders we will notify you by email or an in-product notice. Continued use of the site after changes take effect constitutes acceptance.
Wino Notion LLC · wino@winonotion.com. Please include "Privacy request" in the subject line for rights requests.