Legal
Privacy policy
Horreum keeps records of wine kept for members by venues. This policy explains what we keep to do that, why, who can see it, and how to remove it. It is written to be read, and it is the same policy the app shows.
In short: Horreum keeps only what it takes to run your locker and to learn how the app itself is used. Nothing is sold, no advertising network touches it, and the app does not track you across other apps or websites. You can delete your account from inside the app.
Who we are
Horreum is operated by HORREUM LLC, a Michigan limited liability company (“Horreum”, “we”). The service consists of this website (horreum.cloud) and the Horreum application (app.horreum.cloud), which venues use to manage members’ wine and members use to see it.
Two roles
For a venue (a restaurant, club or bar that subscribes to Horreum), Horreum processes the venue’s records on the venue’s behalf. For a member (a person whose wine a venue keeps), the venue is the party that decides to keep records about you and what those records say; Horreum stores and displays them for the venue and for you. Questions about why a venue holds particular information about you are best put to the venue; we will help with anything about how it is stored and shown.
What the app keeps
- Your account. Your name, email address and phone number, as your venue entered them when it set up your locker and as you edit them in Profile settings; a sign-in password you choose; the one-time codes emailed to you to confirm it's you.
- Your locker. The bottles stocked for you and the ones you brought in, when they arrived, when a bottle was pulled and how (at the table or off site), the requests you send the team, and your ratings and notes.
- Messages. Conversations between you and the venue's team inside the app.
- Keepsake photos. When a bottle comes to your table, the venue's team may offer to take a photo of you with it. Only if you say yes: the photo is taken inside the app with the device's camera (it cannot be saved to the staff member's phone or gallery), held in private storage, checked by a manager, and then shown to you — and only you — on your History page. You can delete it there at any time, and deletion is permanent.
- Preferences. Your theme and locker finish, saved to your account so they follow you between devices.
- Payments, only where your venue has turned them on. If your venue accepts cards through the app, your card details go directly to Stripe, our payment processor; Horreum never sees the number and keeps only the card's brand, its last four digits and a payment reference for your receipts.
- Bug reports. If you report a problem, we keep what you wrote, which screen you were on and the app version, so it can be reproduced.
- How the app is used. Which screens and features are opened and how often — for example whether a request began on the atlas or the list, or whether a bottle was rated — together with the app version and the kind of device. It is kept in Horreum's own database, tied to your account only so it can be removed with it, never sold or shared, and never includes what you wrote in a note, a journal entry or a message. We use it to decide what to build and fix.
- Technical records. To keep the app reliable we record when a loading screen misbehaves (which page, which version, your device's browser string) and standard server logs.
Location. The app never asks for, reads or stores your location. Its day and night looks follow the clock: sunrise and sunset are estimated from your device's time zone, nothing more precise than that.
Camera. The camera is used by venue staff, in the staff app, for two things: reading bottle labels and tags, where the code is read from the frame on the device and no image is kept; and keepsake photos, described above, which are only ever taken with your agreement.
Why
To run your locker and show it to you; to let the venue stock it, pull bottles for you and answer your requests; to send you the emails you've asked for (codes, invitations and, if you've left them on, notices about your bottles); to issue receipts where the venue takes payment in the app; to find and fix faults; and to see which parts of the app are used, so we know what to improve. That is the whole list. Horreum does not use your information for advertising, does not sell or rent it, and does not build profiles of you for anyone else.
Who can see it
- Your venue. The team at the venue that holds your locker sees your locker, your requests and your messages — they need them to serve you. Staff with no permission to read messages cannot.
- Service providers working for Horreum. Supabase hosts the database, file storage and sign-in; Stripe handles payments for venues that use them; an email service delivers codes and notices. Each processes data only to provide its service to us.
- Ordinary web requests. A few things load straight from other services as any web page would, and those services see your device's network address in the process, nothing else: fonts a venue has chosen for its branding (Google Fonts), the label-reading library used in the staff app (jsDelivr), and the weather shown over a wine region in the atlas (Open-Meteo, which is sent the region's coordinates, never yours).
- When the law requires it, or to protect the safety of members, venues or the service.
Nobody else. Your information is not shared with other venues on the platform.
Your choices
- Edit your name, email, phone and notification preferences any time in Profile settings.
- Delete your account from Profile settings → Close account, or follow the steps at horreum.cloud/delete-account. Your sign-in, personal details, preferences, messages and keepsake photos are removed. Records of past purchases and pulls remain with the venue as its own business records, as the law requires of it; they are no longer tied to a live account.
- Remove a keepsake photo from its entry on your History page whenever you like.
- Ask us for a copy of what we hold, or to correct or erase it, at gabriel@horreum.cloud.
How long it's kept
For as long as your account is open. After you delete it, personal details are removed promptly; server logs and diagnostic records age out on their own within a year; the venue keeps its purchase records for as long as its books require.
Security
Everything travels encrypted between your device and our servers. Access to the database is controlled row by row, so a member can only ever read their own locker and a venue can only ever read its own members. Photos and attachments live in private storage that is reachable only through short-lived signed links issued to people the rules above allow. Passwords are stored hashed; card numbers are never stored by Horreum at all.
This website
horreum.cloud sets no cookies and runs no analytics or advertising trackers, and it hosts its own fonts. If you send a form here — a demo request, a pricing question, a support message — we keep what you typed, the page you sent it from and your browser’s user-agent string, so that a person can answer you. Our hosting provider keeps standard server logs (IP address, browser, time) for security and reliability.
Where you live
Residents of states with privacy laws that grant specific rights (including California) may exercise them by writing to us; we do not sell or share personal information for advertising, so there is nothing to opt out of on that front.
Age
Horreum is built around wine. It is not directed to anyone under the legal drinking age where they live, venues may only open lockers for adults, and we do not knowingly keep information about anyone younger. If you believe we have, write to us and it will be removed.
Changes
If this policy changes in a way that matters, the app will say so the next time you open it, and the date at the top will move.
Contact
HORREUM LLC, Grand Rapids, Michigan · gabriel@horreum.cloud