Last updated: 26 October 2026
This is a translation for convenience; the German version is legally binding.
SHOOTA GmbH, Sollner Str. 3, 81479 München, email: info@shoota.de. See the legal notice.
Your account consists of your email address and name. On top of that comes the content you create yourself: wines, tastings with ratings and notes, cellar stock and purchases, wishlist, photos of labels and invoices, shares with the email addresses you enter for them, as well as your credit and its transactions. The legal basis is the performance of the user agreement, Art. 6(1)(b) GDPR.
The app and all data are stored on a server of Hetzner Online GmbH in Germany. The server writes technical access logs (IP address, time, requested address) for operation and security.
You sign in with a code or link that we send you by email; a new address creates your account this way. Emails are sent via Resend, Inc. (USA) as a data processor. Signing in sets a cookie with a signed session identifier that is valid for one year. There are no other cookies, tracking or analytics tools. To protect against abuse (too many login emails, guessing codes), we store a non-reversible value derived from your IP address with each sign-in — never the address itself — and delete it on an ongoing basis once it is older than one day.
Photos of labels and invoices, dictated tasting notes and wine data are transmitted to Anthropic PBC (USA) for analysis and processed there by Claude, for example to read a label, generate a taste profile or estimate an online price via web search. Only what the respective operation needs is transmitted; according to its own terms, Anthropic does not use API data for training. These requests cost credit and only happen when you trigger them or when a wine receives a profile for the first time. The transfer of data to the USA is based on the EU Standard Contractual Clauses.
Before anything is sent to Anthropic for the first time, the app explicitly asks for your consent. Without it nothing is transmitted; you then enter wines by hand. You can withdraw your consent at any time under You → Settings → AI features; analyses already carried out are not affected.
Purchases on the website are processed by Mollie B.V. (Netherlands). Payment details such as card numbers do not reach us; we receive the payment status and a transaction number. In-app purchases from the App Store or Google Play are handled by the respective store; the purchase notification reaches us via RevenueCat, Inc. (USA) with the product, transaction number and your user ID.
There is no list of users. You share by entering an email address. Whoever has an account with that address, or creates one later, sees your name, your tastings, cellar additions and your cellar. The app does not show whether an address has an account. The address is stored with your share for as long as the share exists, that is until you stop sharing or delete your account. This also applies if the account behind the address is deleted: the share then applies to whoever next signs in with that address. You only see the people who share with you, with their names. Only you see prices.
Your data remains until you delete your account. You can do this at any time in the app under “You”. This removes wines, tastings, photos, purchases, credit and your shares. If someone else shared with your email address, the address stays stored in their share until they stop sharing or delete their own account (see “Friends”). Logs of AI requests are kept as cost records without any link to you personally. Expired sign-in links are deleted on an ongoing basis.
You have the right of access, rectification, erasure, restriction of processing, data portability and objection. Under “You” you can download your cellar and tastings as CSV, change your name and delete your account. For anything else, write to info@shoota.de. Complaints can be lodged with the competent data protection supervisory authority, which for us is the Bavarian Data Protection Authority (Bayerisches Landesamt für Datenschutzaufsicht).