Privacy
Last updated: 2026-06-01.
Yawaragi is operated by the maintainer named in the Impressum, who acts as the data controller under GDPR Art. 4(7). This page lists the categories of personal data we process and the third-party processors we rely on. It is updated alongside every release that introduces or changes a processing operation, per ADR-0009.
Anonymous session cookie (yawaragi_session)
When you use a feature that calls a paid AI service (today: the label scan), we set a signed, opaque cookie named `yawaragi_session` with a 24-hour sliding lifetime. The cookie holds a random identifier — never your name, email, or IP. We use it together with a short-lived hash of your IP address (kept only as a query key, never stored as plaintext and never written to a database or log) to cap how many scans a single visitor can run per day, so the AI bill stays bounded. Lawful basis: legitimate interest in cost protection of paid AI surfaces (GDPR Art. 6(1)(f)). Retention: 24 hours, sliding. Data residency: EU (rate-limit storage hosted in an EU region of Upstash Redis).
Data processors
Vercel, Inc. (USA) — hosting, build, and edge logs. Transfer mechanism: EU-US Data Privacy Framework plus EU SCCs as a fallback. Vercel processes service-generated data (request logs, build metadata) as an independent controller.
Supabase, Inc. — Postgres database for the Sakenowa reference mirror and (from Phase 2.5) user-scoped tables. Project region: eu-central-1 (Frankfurt). Transfer mechanism: EU SCCs (Modules 2 and 3) governed by Irish law. Service usage telemetry is processed by Supabase as an independent controller under Art. 6(1)(f) (billing, security, service improvement). Breach notification SLA: 48 hours.
Upstash, Inc. — Redis key-value store hosted in an EU region (e.g. eu-central-1 Frankfurt) used as the rate-limit budget store for the anonymous-session cookie described above. Stored data: the salted SHA-256 hash of the visitor IP and the opaque session id, each with a 24-hour TTL. No plaintext IPs, no account identifiers. Transfer mechanism: EU SCCs (data does not leave the EU region). Data Processing Agreement: pending signature before Production deployment.
Sake brand and brewery reference data is mirrored from the public Sakenowa Data API (muro.sakenowa.com). The mirror itself contains no personal data.
Retention
Cookies expire after one year. Phase 2 reference data is retained for the lifetime of the service. Future per-user data (Phase 2.5+) follows the retention rules in ADR-0009.
Contact
For data-subject requests (access, rectification, erasure, portability), use the email address in the Impressum.