Privacy policy

Controller

The controller is Butelka, prodaja vin, Lenart Černelič, s.p., Kidričeva ulica 37, 6000 Koper, Slovenija. Contact: hiya@wine-lies.com. We have not appointed a data protection officer because the currently known processing does not require one; this is reviewed if the scope changes.

Data and purposes

For hosted nights we process a Host-device identifier, session or seat cookie, token seats, optional private first names, questionnaire answers, votes and round scores. This lets you run the game, see results and helps prevent abuse.

For an account we process email, sign-in sessions, hosted nights, pack entitlements and support data. For payments we will process order data and a payment-provider customer identifier; we do not store card details.

If you subscribe to news, we process your email, language, consent time and consent evidence to send news about new packs and ways to play. Newsletter mail is separate from transactional sign-in, account and order messages. Every newsletter includes an unsubscribe option.

Bases, recipients and transfers

The legal basis for providing the game and account is performance of a contract or steps at your request. Security, abuse prevention and basic operation rely on legitimate interests. Newsletters rely on consent.

We use hosting, database, email, payment, print-job and file-storage providers: Vercel, Neon, Resend, Stripe, Trigger.dev and Cloudflare R2. Public audience measurement uses Plausible (hosted, cookieless, public pages only) only after you opt in. Errors use Sentry (EU). Operational logs use Better Stack (EU, short retention) when TELEMETRY_LIVE is on. None of those systems receive OTPs, emails, table codes, answers or the Liar.

Analytics load only if you allow measurement in the cookie notice. Refusing does not affect play. There are no advertising tags (Meta, Google Ads).

Retention and rights

We keep data only as long as necessary for the stated purposes. Unclaimed nights and temporary access are short-lived; exact periods depend on the feature and its technical settings. Accounting records are kept for the period required by tax law. After account deletion, an anonymised purchase record may remain where needed for tax compliance.

You may request access, correction, deletion, restriction, objection or portability where the legal conditions apply. Contact hiya@wine-lies.com; we may verify your identity before acting. You may complain to the Slovenian Information Commissioner if you believe processing is unlawful.