House documents

Privacy policy

What we collect (not much), why (so you can have a profile and get what you asked for) and what we never do (sell your data — this place is not for sale).

1. What we collect, and nothing more

It depends on what you do here. Browsing the site asks nothing of you: no sign-up, no login.

a) If you leave your e-mail in “let me know”: we keep only the e-mail, to send you the house news (every new Garimpo pick, every issue of Contrarrótulo and whatever else opens up). Legal basis: your consent under the LGPD, the Brazilian data protection law (art. 7, I), given when you send it.

b) If you create your cellar (member profile): we ask for your name, public nickname, e-mail, password, date of birth, state and city. Each one has a reason:

Name and nickname: the nickname is what the community sees; your name stays with the house only.
E-mail and password: they’re the key to your account. The password is stored encrypted by our authentication provider — not even we can see it.
Date of birth: this is a site about alcoholic drinks. We need to confirm you’re 18 or older, as the law and common sense require.
State and city: to know where the people at the table come from and to organize things by region (the Carta de Vinho, for example, goes by city).

Legal basis: carrying out the sign-up you asked for yourself (LGPD, art. 7, V) and, for your age, complying with a legal obligation (art. 7, II). The two optional opt-ins on the form (news and future perks) are consent (art. 7, I), and you can untick them right there or ask to withdraw later, without losing your account or your badge.

About the FOUNDER badge: it belongs to the profile, so it needs this data to exist — there’s no way to have the badge without signing up. But “needing the data” means only that: keeping it so your account stays up and running. It doesn’t become a list to sell, or a profile for advertisers.

c) If you send in a wine list: we keep the restaurant’s name, city/state, the photo or PDF of the list and, if you want the credit, your e-mail. The list becomes public information for the community; your e-mail doesn’t.

d) If you suggest a label for the Garimpo or the Rankings and leave your e-mail: we use it just once, to let you know (and thank you) if your suggestion makes it onto the site. It doesn’t go on any list. Legal basis: your consent (LGPD, art. 7, I), given when you send it. For a Taça em Tela tip (a film, series or book the house should see) we don’t ask for an e-mail: we keep the tip and, if you write one, your nickname, which only appears as credit if the tip makes it onto the page.

d2) If you point out a mistake on a wine page ("Spotted something wrong? Flag it to the house"): we keep the text you wrote, the page’s address and your nickname, if you choose to leave one. No e-mail, no sign-up (what Netlify records on every form is in item 2). It’s so the house can check the source and fix it; the nickname is just so we can thank you.

e) If you join in at the table (Open Bottle, À mesa, cheers, games): we keep what you post (text, the boxes you tick and the photo, if you send one, shrunk on your device and stripped of location data), your profile photo if you pick one, your points, your Label of the Day plays and your shelf. Everything shows up with your nickname, never your name. A cheers is recorded with an anonymous code (hash), with no e-mail or IP; if you have a cellar, you show up with your nickname. Legal basis: carrying out the sign-up (art. 7, V). Cellar holders can get three e-mails from the house, each with its own switch in “My e-mails”: a heads-up when someone replies to you in À mesa, the Label of the Day reminder and the Mesa da Semana digest. Nothing beyond that.

f) Audience measurement: we use GoatCounter and Umami, which count visits and clicks without cookies and without identifying you (your IP address isn’t stored). And the list of cities in the sign-up form comes from the public API of IBGE (Brazil’s statistics institute), which receives only the state’s abbreviation — none of your data.

2. Where the data lives

Profiles and passwords are kept at Supabase; forms and hosting, at Netlify; the e-mails the house sends go out through Resend. All of them are infrastructure providers, working under their own data protection agreements — they process data on our behalf, they don’t own your data. When Netlify receives any form from the site (wine list, suggestion, tip, error report, let me know), it also records the IP address, the browser and the page the submission came from: that’s how the service works. The house doesn’t use these three pieces of data for anything and doesn’t copy them anywhere; they stay only in the Netlify dashboard, which the house reads and can delete.

3. What we NEVER do

Sell, rent, trade or hand over your data to third parties. Never. Not for any amount of money: our opinion is not for sale, and your details even less so;
Hand your data over to an advertiser, brand, winery or importer;
Send spam — you get the essentials, and not much more;
Use advertising tracking cookies;
Show your name, e-mail, age or address publicly: what the community sees is the nickname you chose.

4. How long we keep it

For as long as your account exists, or as long as you want to get the e-mails. Asked to leave? We delete it — and whatever the law requires us to keep, we keep only for the period it sets, and no longer.

5. Your rights (LGPD)

You can ask, at any time and free of charge, for: confirmation that we hold your data, access to it, correction, portability, withdrawal of consent and deletion of your account and your data. Just get in touch at contato@vinhozinho.com.br or on Instagram at @vinhozinho — we sort it out with no red tape.

6. Minors under 18

This site is for people aged 18 and over and doesn’t create profiles for minors. If we find a sign-up from someone under 18, we delete it.

7. Changes to this policy

If anything changes, this page gets updated, with a clear note of what changed and the date at the bottom. On September 24, 2026 item e) was added, about Open Bottle, À mesa, cheers, games and the e-mails for cellar holders, along with the Taça em Tela tip in item d). On September 25, 2026, Umami joined item f), alongside GoatCounter. On September 26, 2026 item d2) was added, about reporting a mistake on a wine page, and item 2 began to say what Netlify records on every form.

Last updated: September 26, 2026.