Privacy Policy

Skål is the controller of the personal data described here. For privacy questions, access requests, or complaints, contact us at privacy@theopenbar.live.

Account data. Email address, authentication identifiers, and any display name or profile details you provide. If you sign in with a third-party provider, we receive the basic profile information that provider shares.

Content you create. Themes and prompts you enter, generated and edited menus, saved drinks, favorites, collections, notes, event details, and any menus you choose to share.

Preferences. Guest counts, alcohol level, budget, difficulty, excluded ingredients, language, and similar settings.

Technical and usage data. IP address, device and browser type, pages viewed, feature interactions, search relevance feedback, timestamps, and error diagnostics. Some of this is collected automatically to keep the Service secure and reliable.

Communications. Messages you send us and, if you subscribe, your email address and subscription status.

Payment data (when payments launch). If we introduce paid plans or purchases, payments will be handled by a third-party payment processor. We will receive limited billing information such as plan, transaction status, billing country, and the last digits and brand of a card. We do not store full card numbers or security codes on our systems.

We do not knowingly collect special categories of data. Please avoid entering sensitive personal information (for example health or dietary-medical details about named guests) into free-text fields.

To provide the Service — generating, saving, editing, and sharing menus and shopping lists, and maintaining your account (performance of a contract).

To improve the Service — measuring search quality, fixing bugs, and developing new features, using aggregated or minimised data wherever possible (legitimate interests).

To secure the Service — preventing abuse, fraud, and unauthorised access, and enforcing our Terms (legitimate interests, legal obligations).

To communicate — service notices, transactional email, and, where you have signed up or where permitted, marketing email you can unsubscribe from at any time (consent or legitimate interests).

To process payments — if and when paid features are offered, to take payment, prevent fraud, manage subscriptions, issue refunds, and meet accounting and tax obligations (contract and legal obligations).

Automated features. Some features rank, filter, or suggest recipes automatically. These do not produce legal or similarly significant effects. If we later add features that send your content to third-party processing providers, we will describe that here before doing so.

We do not sell personal data. We share it only with service providers acting on our instructions, including hosting and database providers, authentication providers, email delivery providers, analytics and error-monitoring providers, and, in the future, payment processors. Each is bound by contract to protect the data.

We may also disclose data where required by law, to protect our rights or the safety of others, or as part of a merger, acquisition, or asset sale — in which case we will notify you if your rights change.

Content you deliberately publish or share via a public link may be visible to anyone with that link.

Our providers may process data outside your country, including outside the EEA or UK. Where that happens, we rely on appropriate safeguards such as adequacy decisions or the European Commission’s standard contractual clauses.

We keep account data and saved content for as long as your account is active. When you delete content it is removed from the live Service and from backups on our normal backup cycle. If you delete your account we delete or anonymise associated personal data, except where we must keep records for legal, tax, accounting, or dispute-resolution purposes. Aggregated or anonymised statistics that cannot identify you may be kept indefinitely.

Depending on where you live, you may have the right to access, correct, delete, port, or restrict processing of your data, to object to processing based on legitimate interests, and to withdraw consent at any time. You can exercise most of these rights directly in your account settings, or by contacting us. You also have the right to complain to your local data protection authority (in Sweden, Integritetsskyddsmyndigheten).

We will not discriminate against you for exercising your privacy rights.

We use strictly necessary cookies and local storage to keep you signed in and remember your preferences. If we add analytics or marketing cookies that are not strictly necessary, we will ask for consent where required and provide controls to manage them.

We use access controls, row-level database security, encryption in transit, and least-privilege service credentials. No system is perfectly secure, but we work to protect your data and will notify you and any relevant regulator of a qualifying data breach as required by law.

The Service is intended for adults of legal drinking age in their jurisdiction and is not directed to children. We do not knowingly collect data from children. If you believe a child has provided us with personal data, contact us and we will delete it.

We may update this policy as the Service evolves — for example when we launch payments, sharing, or collaboration features. We will update the “last updated” date and, for material changes, provide additional notice in the product or by email.