Last updated September 19, 2026
Privacy Policy
The short version. Your tasting notes are yours. We use what you give us to run Winote and nothing else. We do not sell your personal information, and we do not show ads.
Winote is operated by SparrowSoft ("Winote", "we", "us"). This policy covers winote.app, the Winote iOS app, and the tasting events hosted through them.
What we collect
- Account details. Your email address and, if you give it, your name. Winote has no passwords: you sign in with a six-digit code we email you, or with a passkey stored on your own device.
- What you put in. Tasting notes, scores, descriptors, the wines in your library or cellar, photos of labels, spreadsheets you import, and for trade accounts your portfolio, events, logo and team members.
- Payment details. If you buy a paid plan or an event upgrade, our payment processor collects your card details. We never see or store your full card number.
- Technical information. Your IP address, browser type and the times of your requests, which our servers log to keep the service running and to stop abuse. If something breaks, an error report may include the page you were on.
How we use it
- To run Winote: save your notes, show you your library, host tastings and their results.
- To sign you in and keep your account secure, including limiting repeated sign-in attempts.
- To send service email, such as sign-in codes and receipts. We do not send marketing email unless you ask for it.
- To take payment for paid features.
- To find and fix problems, and to understand in aggregate how Winote is used.
Who sees your notes
- Your personal library is private. Notes you write for yourself are visible only to you.
- Hosted tastings are shared with the host. When you join an event, the scores, descriptors and comments you submit for that event are shared with the organization hosting it, along with your name and email address if you are signed in or choose to give them. Hosts use this to see what their guests thought and may follow up with you. A copy of your event notes also stays in your own library.
- Trade teams share a workspace. Members of an organization can see that organization's portfolio, events and results, according to their role.
- The wine catalog is shared. When you add a wine that is not yet in the catalog, its public facts (producer, name, vintage, region, grape) become part of the catalog other people can match against. Your notes about it do not.
We also disclose information when the law requires it, or to protect the rights and safety of our users and of Winote. If Winote is ever acquired or merged, your information may transfer to the new owner under the terms of this policy.
Who helps us run Winote
We use a small number of companies to provide the service. Each receives only what it needs for its job.
| Provider | What it does |
|---|---|
| Railway | Hosts the application and its database |
| Cloudflare | Stores uploaded photos and logos, and delivers the site |
| Postmark | Delivers sign-in codes and other service email |
| Stripe | Processes payments and stores card details |
| Honeybadger | Receives error reports so we can fix bugs |
| Anthropic | Reads label photos and wine names you submit, to identify the wine. We do not send it your tasting notes or your account details. |
Cookies and browser storage
Winote uses only what it needs to work: a session cookie that keeps you signed in, a short-lived cookie that ties a sign-in code to the browser that asked for it, and your browser's local storage for your light or dark theme choice and for notes you take as a guest before signing in. We do not use advertising cookies or third-party trackers.
How long we keep it
We keep your account and your notes for as long as your account is open. When you ask us to delete your account we delete your personal library and account details within 30 days, apart from what we must keep for tax, accounting or legal reasons. Notes you submitted to a hosted tasting remain part of that host's event results, with your name and email address removed. Server logs and error reports are kept for a limited time and then deleted.
Your choices
- See and correct. You can view and edit your notes and profile in the app at any time.
- Get a copy, or delete. Email hello@winote.app from the address on your account and we will send you a copy of your data or delete your account.
- Regional rights. Depending on where you live, you may have further rights over your personal information, such as objecting to certain uses or complaining to a regulator. We honor those requests wherever they apply.
Security
Connections to Winote are encrypted. Sign-in codes are single-use, expire within minutes and work only in the browser that requested them, and we never log them. No service can promise perfect security, so if you believe your account has been accessed without your permission, tell us right away.
Age
Winote is about wine. It is intended only for people of legal drinking age where they live, and we do not knowingly collect information from anyone younger.
Changes
If we change this policy in a way that matters, we will update the date at the top and tell account holders by email before the change takes effect.
Contact
Questions about privacy? Email hello@winote.app. See also our Terms of Service.