Privacy policy

Data controller

Absociety is published in a personal, non-commercial capacity by a private individual, who is the controller of the data described here. For any question or request: contact@theabsociety.com.

Data collected

When you create an account:

• email address, pseudonym, first name, last name and country;
• password — stored hashed only, never in clear text;
• optionally: date of birth, the year you started collecting, and links to Facebook, X or Instagram profiles.

While you use the site:

• the contents of your collection (bottles owned, quantities) and your wanted lists;
• the acquisitions you record (type, date, price if given, provenance);
• the technical dates tied to the account (creation, email verification).

Nothing else is collected: no browsing data, no analytics, no profiling.

Purposes and legal bases

• Providing the service you asked for — account, collection, lists, trading between collectors: performance of the contract (article 6, 1, b of the GDPR).
• Keeping the account secure — session, email verification, password reset: legitimate interest (article 6, 1, f of the GDPR).

Retention

Data is kept for as long as the account is active. The account and all the data attached to it are deleted on a simple request to contact@theabsociety.com. Password reset links expire on their own after one hour.

Your rights

You have the rights of access, rectification, erasure, portability, restriction and objection over your data. To exercise them, write to contact@theabsociety.com. You may also lodge a complaint with the CNIL, the French data protection authority (cnil.fr).

Cookies

The site only sets the cookies it needs to work:

• the session cookie, which authenticates you during your visit and expires when you close the browser;
• the “remember me” cookie, set for 7 days only if you tick that box when signing in;
• a display preference cookie (table or tiles), set when you choose a view; it holds no identifier.

No third-party cookies, no advertising trackers, no analytics: as these cookies are strictly necessary or a mere display preference, no consent banner is required.

Hosting and transfers

Data is hosted by OVH in France. It is not transferred outside the European Union, nor sold, nor passed on to third parties.