Last updated 2026-07-28
Beta notice. Millésime is currently in invite-only beta. This Privacy Policy is effective as of the date above and applies to all users of the platform.
1. Controller
The controller responsible for the processing of your personal data within the meaning of the General Data Protection Regulation (GDPR) is:
Luca Rederer Heusteigstr. 116 70180 Stuttgart Germany Email: privacy@millesimeapp.com
2. Overview of data we collect
When you use Millésime, we collect and process the following categories of data:
Account data — your display name, username, email address, profile photo, and knowledge level selected during onboarding.
Content you create — tasting notes, cellar entries, bottle pop events, reactions (likes, bookmarks), comments, follows, and direct messages.
Bottle and producer data — bottles you add to your cellar, bottles you submit for inclusion in the database, label photos you upload, and aroma descriptors you select.
Usage data — which features you use, which bottles and producers you view, session timestamps, and in-app navigation events.
Device and technical data — device type, operating system, browser type, IP address, and push notification token (if you grant permission).
AI interaction data — if you use the AI Sommelier feature, the content of your conversation is processed by Anthropic (see Section 7).
Payment-adjacent data — if you click an affiliate buy button, we record the click event. We do not process payment information; all transactions occur on the retailer's platform.
2.1 Anonymous visitors
If you browse public pages on Millésime (such as bottle, producer, or restaurant pages) without an account, we still process limited technical data — IP address, device type, browser type, and page views — under the same legal basis described in Section 3.6 (platform security and fraud prevention), and to operate the public pages themselves. We do not create a profile for anonymous visitors and do not link this data to an account you may create later, except where the same session or device is used to complete registration shortly afterward. Public tasting notes and community content shown on these pages do not display the identity (username, display name, or avatar) of their authors to anonymous visitors.
3. Purposes and legal bases
3.1 Providing the platform (Art. 6(1)(b) GDPR — contract performance)
We process your account data, content, and usage data to operate Millésime and deliver the features you have signed up for — including your cellar, tasting notes, the community feed, bottle discovery, and direct messaging. This processing is necessary to perform our contract with you. You cannot opt out of this processing while remaining a user of the platform.
3.2 Producer analytics dashboard (Art. 6(1)(f) GDPR — legitimate interest)
We aggregate and anonymise community data — including ratings, aroma descriptor frequency, cellar depth by vintage, and geographic distribution of engaged users — and make this available to certified producer partners through our Producer Analytics Dashboard. No individual user is identifiable in any data presented to producers. Producers see aggregated statistics only, such as "74% of community notes on this cuvée mention minerality" or "average cellar time before opening: 4.1 years." Our legitimate interest is in providing producers with meaningful market intelligence about how their wines are experienced by enthusiasts, which in turn supports the sustainability of the platform.
You may object to this processing at any time by contacting privacy@millesimeapp.com. Objection means your content will be excluded from producer analytics going forward.
3.3 B2B data API and intelligence reports (Art. 6(1)(f) GDPR — legitimate interest / outside GDPR scope)
We provide anonymised, aggregated market data to third parties including auction houses, wine retailers, hospitality businesses (hotels, restaurants, bars), and wine investment funds through a commercial B2B data API and periodic intelligence reports. This data is fully anonymised — no individual user can be re-identified from it. Where data is genuinely anonymised in the sense that re-identification is not reasonably possible, it falls outside the scope of the GDPR. We apply strict anonymisation standards before any data leaves our systems. No individual tasting notes, usernames, or account details are shared through this channel.
3.4 Targeted notifications from producer partners (Art. 6(1)(f) GDPR — legitimate interest)
Producer partners you follow may use Millésime's notification infrastructure to send you targeted messages about new releases, events, and content relevant to their wines. For example, if you have a producer's 2016 vintage in your cellar with a rating above 90, you may receive a notification when their 2018 vintage is released. This targeting is based on data you have added to Millésime (cellar entries, ratings) and is processed entirely within our platform — your individual data is never shared with the producer.
When you follow a producer, you will receive relevant notifications from that producer as a natural and expected consequence of the follow relationship. Our legitimate interest is in connecting you with content from producers you have actively chosen to follow. You can opt out at any time under Settings → Notifications → Producer messages.
3.5 Contextual advertising (Art. 6(1)(f) GDPR — legitimate interest)
We may show you content from producer partners based on inferred characteristics derived from your platform activity — for example, estimated cellar value, preferred grape varieties, or regional interests. We conduct this targeting entirely within our own systems. We do not share your individual profile, identity, or personal data with any advertiser. Advertisers purchase access to audience segments (for example, "users with significant cellar activity and interest in blanc de blancs"), not access to individual user records. Our legitimate interest is in showing you content that is genuinely relevant to your interests while generating revenue that supports the platform.
We do not make solely automated decisions that produce legal effects concerning you. Audience segmentation for content recommendations is based on inferred interests and does not produce binding outcomes.
You may opt out of interest-based content recommendations under Settings → Privacy → Personalised content.
3.6 Platform security and fraud prevention (Art. 6(1)(f) GDPR — legitimate interest)
We process technical data including IP addresses, session logs, and device identifiers to detect and prevent abuse, fraud, and unauthorised access. Our legitimate interest is in protecting the integrity of the platform and the security of all users.
3.7 Legal compliance (Art. 6(1)(c) GDPR — legal obligation)
Where we are required to retain or disclose data by applicable law, court order, or regulatory authority, we will do so.
4. Public content and visibility settings
Tasting notes, cellar activity, and pop events can be set to Public, Followers only, or Private. Content set to Public is visible to anyone, including users who are not logged in, producer partners, and third parties browsing the platform. If you set a tasting note to Public, the note, your username, and your rating are visible to all. Your legal name is never required and never displayed — your username is a pseudonym of your choosing.
We are not responsible for how third parties who access your public content use or reference it.
5. Data processors
We use the following third-party services to operate Millésime. Each is a data processor acting on our instructions under a data processing agreement:
| Processor | Purpose | Location | Privacy information |
|---|---|---|---|
| Supabase Inc. | Database, authentication, file storage | EU (Frankfurt) | supabase.com/privacy |
| Vercel Inc. | Website hosting and deployment | EU (Frankfurt) | vercel.com/legal/privacy-policy |
| OneSignal Inc. | Push notifications | USA (SCCs applied) | onesignal.com/privacy_policy |
| Resend Inc. | Transactional email (login links, notifications) | USA (SCCs applied) | resend.com/legal/privacy-policy |
| Anthropic PBC | AI label scanning and AI Sommelier feature | USA (SCCs applied) | anthropic.com/privacy |
| AWIN AG | Affiliate link tracking | EU (Berlin) | awin.com/gb/legal/privacy-policy |
Where processors are located outside the EU/EEA, we ensure appropriate safeguards are in place, including Standard Contractual Clauses (SCCs) as approved by the European Commission.
6. Affiliate links and third-party retailers
The Millésime buy button connects you with third-party wine retailers via our affiliate programme. When you click a buy button, we record the click event for commission tracking purposes. Once you leave Millésime and arrive on the retailer's website, that retailer's own privacy policy applies. We have no control over and no visibility into your activity on third-party websites.
7. AI features
7.1 Bottle label scanning
When you scan a bottle label, the image is processed by Anthropic's Claude API to extract bottle information. The image is transmitted to Anthropic's servers for processing. We do not store the raw image beyond what is necessary to display the result to you. Anthropic processes this data in accordance with its API data processing agreement and does not use API inputs to train its models.
7.2 AI Sommelier
The AI Sommelier feature allows you to have a conversation with an AI assistant about Champagne, food pairing, and your personal cellar. The content of these conversations is transmitted to Anthropic for processing. While we never send your name, email address, or account identifiers to Anthropic, you may voluntarily disclose personal information in the course of a conversation. We advise you not to share sensitive personal data (such as health information, financial details, or government identifiers) in AI Sommelier conversations. Anthropic does not use API inputs to train its models.
8. Data retention
We retain your personal data for as long as your account is active. If you delete your account:
- Your profile, tasting notes, cellar entries, and personal data are deleted within 30 days.
- Content you have made public (tasting notes, cellar activity) will be anonymised rather than deleted where it forms part of aggregated community data that other users have interacted with (for example, a note that has received comments).
- Backups may retain your data for up to 90 days following deletion, after which it is purged.
- Data we are required to retain for legal or accounting purposes will be retained for the statutory period (typically 10 years in Germany for accounting records, though this applies only if a commercial transaction has occurred).
9. Your rights
Under the GDPR, you have the following rights:
Right of access (Art. 15) — you may request a copy of the personal data we hold about you.
Right to rectification (Art. 16) — you may correct inaccurate data directly in your profile settings, or contact us for data we hold that you cannot edit yourself.
Right to erasure (Art. 17) — you may delete your account at any time under Settings → Account → Delete account. See Section 8 for details of what is deleted.
Right to restriction (Art. 18) — you may request that we restrict processing of your data in certain circumstances.
Right to data portability (Art. 20) — you may request an export of your tasting notes, cellar entries, and account data in a machine-readable format.
Right to object (Art. 21) — you may object to processing based on legitimate interest (Sections 3.2, 3.3, 3.5, 3.6) at any time. We will cease that processing unless we can demonstrate compelling legitimate grounds.
Right to withdraw consent (Art. 7(3)) — Millésime does not currently rely on consent as a legal basis for any processing. If this changes in future, you will have the right to withdraw consent at any time without affecting the lawfulness of processing before withdrawal.
Right to lodge a complaint — you have the right to lodge a complaint with the supervisory authority responsible for your place of residence. For users in Baden-Württemberg: Landesbeauftragte für den Datenschutz und die Informationsfreiheit Baden-Württemberg (LfDI BW), Lautenschlagerstraße 20, 70173 Stuttgart, www.baden-wuerttemberg.datenschutz.de.
To exercise any of these rights, contact us at privacy@millesimeapp.com. We will respond within 30 days.
10. Cookies and local storage
We use only technically necessary cookies and local storage to keep you signed in and to remember your consent preferences. We do not use advertising cookies or third-party tracking cookies. For full details, see our Cookie Policy.
11. Children
Millésime is a platform about alcoholic beverages and is not intended for persons under the age of 18. We do not knowingly collect personal data from minors. If you believe a minor has registered, please contact us at privacy@millesimeapp.com and we will delete the account.
12. Changes to this policy
We will notify registered users by email and via an in-app notice if we make material changes to this Privacy Policy. The version number and last updated date at the top of this page reflect the current version. Continued use of Millésime after a material change constitutes acceptance of the updated policy.
13. Contact
For all privacy-related enquiries: privacy@millesimeapp.com
Luca Rederer, Heusteigstr. 116, 70180 Stuttgart, Germany